EUVD-2020-0437

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

jquery prior to 1.9.0 permits Cross-site Scripting via load method failing to remove script tags

Reporter	Title	Published	Views	Family All 74
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 20 (4.2.0.20)	11 Nov 202411:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere eXtreme Scale Liberty Deployment.	21 Mar 202318:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	30 Mar 202620:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in JQuery, Node.js and Swagger UI	17 May 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Webapps (Shares, Console) are vulnerable to an OpenSSL Vunerability (CVE-2020-7656).	17 Sep 202117:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS	11 Jul 202511:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Jackson, jQuery, and Dom4j affect IBM Spectrum Copy Data Management	10 Dec 202123:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus	20 Nov 202020:41	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "8ab253cc-7691-3896-82a9-d8e4956968d9",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-7656
github	www.github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
github	www.github.com/jquery/jquery/commit/606b863edaff29035960e4d813b45d63b8d92876
github	www.github.com/jquery/jquery
github	www.github.com/jquery/jquery/blob/9e6393b0bcb52b15313f88141d0bd7dd54227426/src/ajax.js
github	www.github.com/rails/jquery-rails/blob/master/CHANGELOG.md
github	www.github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-7656.yml
security	www.security.netapp.com/advisory/ntap-20200528-0001
snyk	www.snyk.io/vuln/SNYK-JS-JQUERY-569619

07 Oct 2025 00:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.1

CVSS 24.3

EPSS0.00889