jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
6.1 Medium
AI Score
Confidence
0.007 Low
EPSS
Percentile
79.5%