EDB-49766

PoC

jQuery 1.2 - Cross-Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor Central InfoSecpublished 2021-04-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-11022USmedium6.1Exploit
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan