Descripción
JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
- Aviso de blog.jquery.com blog.jquery.com/2020/04/10/jquery-3-5-0-released/
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2020-11023