PT-2020-8631 · Jquery · Jquery
CVE-2018-18405
·
Published
2020-04-22
·
Updated
2024-08-05
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
jQuery version 2.2.2
Description:
The issue allows for cross-site scripting (XSS) attacks via a crafted
onerror attribute of an IMG element.Recommendations:
For jQuery version 2.2.2, consider disabling the use of the
onerror attribute in IMG elements until a patch is available. Restrict access to potentially vulnerable HTML elements to minimize the risk of exploitation.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jquery