Lucene search
+L

3 matches found

OSV
OSV
added 2018/01/22 1:32 p.m.30 views

GHSA-RMXG-73GG-4P98 Cross-Site Scripting (XSS) in jquery

Affected versions of jquery interpret text/javascript responses from cross-origin ajax requests, and automatically execute the contents in jQuery.globalEval, even when the ajax request doesn't contain the dataType option. Recommendation Update to version 3.0.0 or later...

6.1CVSS6.8AI score0.29726EPSS
SaveExploits2References47
RubySec
RubySec
added 2018/01/22 12:0 a.m.50 views

Cross-Site Scripting (XSS) in jquery

Affected versions of jquery interpret text/javascript responses from cross-origin ajax requests, and automatically execute the contents in jQuery.globalEval, even when the ajax request doesn't contain the dataType option...

6.1CVSS7.1AI score0.29726EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2007/04/10 12:0 a.m.12 views

PT-2007-1156

Name of the Vulnerable Software and Affected Versions: jquery versions prior to 3.0.0 Description: The issue is related to the lack of protection for the structure of web pages, allowing a remote attacker to perform cross-site scripting using cross-domain ajax requests. When a cross-domain Ajax...

8.1CVSS7.5AI score0.99019EPSS
SaveExploits23References192
Rows per page
Query Builder