jQuery Cross Site Scripting vulnerability

2023-06-2621:30:58

Google

osv.dev

cross site scripting

jquery

remote attacker

arbitrary code

options element

software

0.0004 Low

EPSS

Percentile

15.8%

JSON

Cross Site Scripting vulnerability in jQuery v.2.2.0 until v.3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.

CPENameOperatorVersion
jquery-railseq1.0.4
jqueryeq1.11.0
jquery-railseq2.2.2
org.webjars.npm:jqueryeq3.0.0-alpha1
jqueryeq1.6.3
jquery-railseq4.3.1
jqueryeq2.1.1
jquery-railseq3.1.2
jqueryeq1.4.4
org.webjars.npm:jqueryeq1.8.2

Name	Operator	Version
jquery-rails	eq	1.0.4
jquery	eq	1.11.0
jquery-rails	eq	2.2.2
org.webjars.npm:jquery	eq	3.0.0-alpha1
jquery	eq	1.6.3
jquery-rails	eq	4.3.1
jquery	eq	2.1.1
jquery-rails	eq	3.1.2
jquery	eq	1.4.4
org.webjars.npm:jquery	eq	1.8.2