GarlicB/jquery35-local-agent

PoC

Offline jQuery CVE-2020-11023 remediation kit for legacy Spring/JSP - Node.js built-ins only (no npm, no internet)

view exploit source poc_in_githubauthor GarlicBpublished 2026-07-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-11023US	medium6.1OT critical	84.9% (100th)	KEV	2020-04-29
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.