Lucene search
+L

2818 matches found

Github Security Blog
Github Security Blog
•added 2025/04/15 6:30 a.m.•39 views

jquery-validation vulnerable to Cross-site Scripting

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS6AI score0.00353EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2025/04/15 6:30 a.m.•26 views

GHSA-RRJ2-PH5Q-JXW2 jquery-validation vulnerable to Cross-site Scripting

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS6AI score0.00353EPSS
SaveExploits0References5
NVD
NVD
•added 2025/04/15 5:15 a.m.•34 views

CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS0.00353EPSS
SaveExploits0References3
OSV
OSV
•added 2025/04/15 5:15 a.m.•27 views

DEBIAN-CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

5.3CVSS6.5AI score0.00353EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/15 5:15 a.m.•27 views

UBUNTU-CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS5.8AI score0.00353EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/04/15 5:00 a.m.•45 views

CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS0.00353EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/15 5:00 a.m.•195 views

CVE-2025-3573

CVE-2025-3573 concerns the jquery-validation library. Versions before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, where user-controlled input can be written into the localizable validator.messages dictionary. The vulnerability is described as input-driven and ...

6.1CVSS6.1AI score0.00353EPSS
SaveExploits0References3
Mend
Mend
•added 2025/04/15 5:00 a.m.•8 views

CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS0.00353EPSS
SaveExploits0References6
OSV
OSV
•added 2025/04/15 5:00 a.m.•21 views

CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

5.3CVSS5.9AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/04/15 5:00 a.m.•37 views

CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS6.5AI score0.00353EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 3:49 a.m.•35 views

Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.

Summary IBM ApplinX has been updated in order to address the multiple vulnerabilities. Vulnerability Details CVEID:CVE-2015-9251 DESCRIPTION: jQuery is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability usin...

7.5CVSS7AI score0.99215EPSS
SaveExploits17Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/15 3:44 a.m.•20 views

Security Bulletin: A vulnerability in jQuery affects IBM Robotic Process automation and could result in cross-site scripting (CVE-2024-30875).

Summary A vulnerability in jQuery affects IBM Robotic Process automation and could result in cross-site scripting. jQuery is used by IBM Robotic Process Automation as part of the Carbon UI framework. This bulletin identifies the fixes required to address the vulnerability. Vulnerability Details...

7.1CVSS6.7AI score0.00884EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•25 views

jquery-validation 安全漏洞

jquery-validation is a tool from the jquery-validation open source. Provides plug-in validation for forms while making various customizations to fit your application very easy. A security vulnerability exists in versions of jquery-validation prior to 1.20.0, which stems from the showLabel functio...

6.1CVSS6.1AI score0.00353EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•20 views

PT-2025-16320 · Unknown · Jquery Zooeffect

Name of the Vulnerable Software and Affected Versions: 1pluginjquery ZooEffect versions n/a through 1.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers t...

7.1CVSS7.2AI score0.00233EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•2 views

PT-2025-16291

Name of the Vulnerable Software and Affected Versions: jquery-validation versions prior to 1.20.0 Description: The issue concerns Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via...

6.1CVSS5.6AI score0.00353EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•2 views

CVE-2025-26954: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 1pluginjquery ZooEffect 1-jquery-photo-gallery-slideshow-flash allows Reflected XSS.This issue affects ZooEffect: from n/a through = 1.11...

7.1CVSS5.8AI score0.00233EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•4 views

CVE-2025-3573: Improper Neutralization of Input During Web Page Generation

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

6.1CVSS6.3AI score0.00353EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/04/15 12:00 a.m.•10 views

RHEL 7 : python-XStatic-jquery-ui (RHSA-2016:2932)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2016:2932 advisory. jquery-ui javascript library packaged for setuptools easyinstall / pip. The following packages have been upgraded to a newer upstream version:...

6.1CVSS6.6AI score0.2258EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2025/04/10 12:00 a.m.•14 views

Moodle < 3.9.23 JQuery UI Library Upgrade

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.23 or 3.11.x prior to 3.11.16. The JQuery UI library included with Moodle has been upgraded to version 1.13.2, which includes fixes for multiples security issues. Note that the scanner has not...

6.5CVSS6.4AI score0.40768EPSS
SaveExploits5References6
Tenable Nessus
Tenable Nessus
•added 2025/04/10 12:00 a.m.•21 views

Moodle 3.11.x < 3.11.16 JQuery UI Library Upgrade

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.23 or 3.11.x prior to 3.11.16. The JQuery UI library included with Moodle has been upgraded to version 1.13.2, which includes fixes for multiples security issues. Note that the scanner has not...

6.5CVSS6.4AI score0.40768EPSS
SaveExploits5References6
Rows per page
Query Builder