EDB-49767

PoC

jQuery 1.0.3 - Cross-Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor Central InfoSecpublished 2021-04-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-11023USmedium6.1OT criticalKEV
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan