Odoo Apps - Cross-Site Scripting via Prototype Pollution

jquery-bbq 1.2.1 contains a prototype pollution caused by improperly controlled modification of object prototype attributes, letting malicious users inject properties into Object.prototype, exploit requires malicious user interaction. id: CVE-2021-20086 info: name: Odoo Apps - Cross-Site Scriptin...

WordPress JS Archive List <= 6.1.5 - SQL Injection

Miguel Useche JS Archive List contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2025-54726 info: name: WordPress JS Archive List = 6.1.5 - SQL Injection author:...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion

WordPress Delightful Downloads Jquery File Tree versions 2.1.5 and older are susceptible to local file inclusion vulnerabilities via jqueryFileTree. id: CVE-2017-1000170 info: name: WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion author: dwisiswant0 severity: high...

CLSA-2026-1786361523 TuxCare security update for jquery (1 CVE)

TuxCare rebuilt jquery to address 1 CVE. Fixed in 3.3.1-tuxcare.2...

WordPress Sexy Contact Form (<= 0.9.7) - Arbitrary File Upload

Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form formerly Sexy Contact Form before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute...

Malicious code in jquery.ui.tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fc48e6d03705244cf78a2f2ee23c6ffe5a91a64f98d23d6a31f94557bf0d84 [email protected] is a dependency-confusion squat: it is published at version 9999.0.0 with an empty runtime index.js contains only...

Malicious code in jquery.ui.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5bc94d3ac40b31064d4dad8125dc959fdc3559785cdbeb03de2cc16c147ac Package is a dependency-confusion squat on the jquery.ui.core name published at version 9999.0.0. The main entry index.js is empty module.exports = ;...

CLSA-2026-1784596271 TuxCare security update for jquery (1 CVE)

TuxCare rebuilt jquery to address 1 CVE. Fixed in 3.1.1-tuxcare.1...

CLSA-2026-1784164090 TuxCare security update for jquery (7 CVEs)

TuxCare rebuilt jquery to address 7 CVEs. Fixed in 3.3.1-tuxcare.1...

CLSA-2026-1784164088 TuxCare security update for jquery (3 CVEs)

TuxCare rebuilt jquery to address 3 CVEs. Fixed in 3.2.1-tuxcare.1...

CLSA-2026-1780361405 TuxCare security update for jquery (4 CVEs)

TuxCare rebuilt jquery to address 4 CVEs. Fixed in 1.11.3-tuxcare.1...

CLSA-2026-1773188124 TuxCare security update for jquery (5 CVEs)

TuxCare rebuilt jquery to address 5 CVEs. Fixed in 2.2.4-tuxcare.1...

CLSA-2026-1773188123 TuxCare security update for jquery (4 CVEs)

TuxCare rebuilt jquery to address 4 CVEs. Fixed in 1.12.4-tuxcare.1...

CLSA-2026-1773188121 TuxCare security update for jquery (16 CVEs)

TuxCare rebuilt jquery to address 16 CVEs. Fixed in 1.8.2-tuxcare.1...

CLSA-2026-1773101704 TuxCare security update for jquery-validation (5 CVEs)

TuxCare rebuilt jquery-validation to address 5 CVEs. Fixed in 1.19.0-tuxcare.1...

CLSA-2026-1773101701 TuxCare security update for jquery (5 CVEs)

TuxCare rebuilt jquery to address 5 CVEs. Fixed in 3.4.1-tuxcare.1...

PYSEC-2026-628 XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery from 1.1.4 until 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...

IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.1.6 (7278745)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.6 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7278745 advisory. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of...

Security Bulletin: Multiple vulnerabilities reported in jQuery library shipped in IBM WebSphere eXtreme Scale Monitoring Console

Summary Multiple vulnerabilities reported in jQuery library shipped in IBM WebSphere eXtreme Scale Monitoring Console CVE-2020-11023, CVE-2020-7656,CVE-2019-11358,CVE-2021-41182,CVE-2021-41183,CVE-2021-41184,CVE-2022-31160 Vulnerability Details CVEID:CVE-2020-11023 DESCRIPTION: In jQuery versions...