Login Request a demo
JQ
Product
jQuery
by jquery · last CVE May 19, 2020
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 1Medium 8Low 0
Severity
All severities11Critical0High1Medium8Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add jQuery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: >= 1.0.3, < 3.5.0
CVE-2020-7656
6.1
6%
May 19
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method
Affected: before 1.9.0
CVE-2020-11022
6.1
99%
Apr 29
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e
Affected: 1.2 before 3.5.0
CVE-2018-18405
6.1
2%
Apr 22
jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element
Affected: 2.2.2
CVE-2019-11358
6.1
87%
Apr 20
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
Affected: before 3.4.0
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: before 3.0.0
CVE-2012-6708
6.1
9%
Jan 18
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks
Affected: before 1.9.0
CVE-2014-6071
6.1
2%
Jan 16
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after
Affected: 1.4.2
Showing 8