Componentpedia: jquery : 1.11.3 issues and vulnerabilities | Meterian Boost Open Source Security Resource

CVE-2020-11022
CWE-79
Threat level: MEDIUM | CVSS score: 6.1

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2019-5428
Threat level: MEDIUM | CVSS score: 5

This advisory is a duplicate of GHSA-6c3j-c64m-qhgq. This link is maintained to preserve external references.

CVE-2015-9251
CWE-79
Threat level: MEDIUM | CVSS score: 6.1

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVE-2020-11023
CWE-79
Threat level: MEDIUM | CVSS score: 6.1

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Componentpedia / Listings / jquery / 1.11.3

jquery