jQuery vulnerable to Cross-Site Scripting (XSS)

🗓️ 14 May 2022 01:09:51Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 143 Views

jQuery XSS vulnerability before 1.6.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	4 May 202117:43	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Dojo and jQuery might affect IBM Business Automation Workflow and IBM Business Process Manager (BPM)	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has improved security for user input validation (CVE-2011-4969)	1 Nov 202418:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes May 2026	29 May 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	13 Apr 202120:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been fixed in IBM Security Identity Manager Virtual Appliance	15 Sep 202015:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spark affecting IBM QRadar User Behavior Analytics	18 Oct 202213:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jquery affect IBM Storage Scale	8 May 202407:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Symphony 7.3.1	20 Feb 202106:44	–	ibm
FreeBSD	jenkins -- multiple vulnerabilities	1 Feb 201700:00	–	freebsd

Vulners

Node

jquery jqueryRange<1.6.3nuget

jquery jqueryRange<1.6.3npm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2011-4969
github	www.github.com/jquery/jquery/commit/db9e023e62c1ff5d8f21ed9868ab6878da2005e9
lists	www.lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E
blog	www.blog.mindedsecurity.com/2011/07/jquery-is-sink.html
bugs	www.bugs.jquery.com/ticket/9521
openwall	www.openwall.com/lists/oss-security/2013/01/31/3
ubuntu	www.ubuntu.com/usn/USN-1722-1
security	www.security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450224
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2011-4969.yml
security	www.security.netapp.com/advisory/ntap-20190416-0007

14 Jan 2026 21:43Current

4Medium risk

Vulners AI Score4

CVSS 24.3

EPSS0.06323