Skip to content

jquery 1.7 contains know vulnerabilities #75

@JuhaO81

Description

@JuhaO81

Please update to latest (3.60 now) jquery

Dependency jquery version 1.7 was detected and suffers from the following vulnerabilities:

CVE-2020-7656: jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions