jQuery < 3.5.0
mediumCVSS 6.1
Passing HTML to DOM manipulation methods can execute script even after sanitisation.
Dampak
Cross-site scripting in applications that pass untrusted HTML to jQuery.
Perbaikan
Upgrade to jQuery 3.5.0 or later.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2020-11022Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2020-11022.
Jalankan audit gratis