PatchTheCVEjquery vulnerabilities
Recent CVEs affecting jquery products. 4 tracked.
jquery has 4 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 3. Most recent: 2020-05-19. Highest priority: CVE-2020-11023 (score 84/100).
- CVE-2020-7656 MEDIUM 6.1 UPGRADE DOWNGRADE jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method
- CVE-2020-11023 MEDIUM 6.9 EXPLOITED UPGRADE MITIGATE JQuery Cross-Site Scripting (XSS) Vulnerability
- CVE-2020-11022 MEDIUM 6.9 UPGRADE UPGRADE In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing i
- CVE-2018-18405 MEDIUM 6.1 DOWNGRADE jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element
FAQ
How do I fix jquery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jquery being exploited right now?
Yes: 1 jquery CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which jquery CVE should I patch first?
CVE-2020-11023 currently ranks highest (84/100): JQuery Cross-Site Scripting (XSS) Vulnerability.