Skip to content
Jquery vulnerabilities
Newest
-
jqueryui jquery ui, debian linux, drupal jquery ui checkboxradio +8 more +10 more
jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label
CVE-2022-31160
Public exploitFix available
6.1 Medium
-
jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 more
XSS in the `of` option of the `.position()` util
CVE-2021-41184
Public exploitFix available
EPSS 40.8%
6.5 Medium
-
jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 more
XSS in `*Text` options of the Datepicker widget
CVE-2021-41183
Fix available
6.5 Medium
-
jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 more
XSS in the `altField` option of the Datepicker widget
CVE-2021-41182
Public exploitFix available
EPSS 39.4%
6.5 Medium
-
jquery, juniper junos, netapp active iq unified manager +4 more +6 more
Cross-Site Scripting in jquery
CVE-2020-7656
Public exploitFix available
6.1 Medium
-
jquery, debian linux, drupal +49 more +51 more
Potential XSS vulnerability in jQuery
CVE-2020-11023
In KEVPublic exploitFix available
EPSS 84.9%
6.9 Medium
-
jquery, debian linux, drupal +67 more +69 more
jQuery has a potential XSS vulnerability
CVE-2020-11022
Public exploitFix available
EPSS 99.2%
6.9 Medium
-
jquery
jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element.
CVE-2018-18405
Disputed
6.1 Medium
-
backdropcms backdrop, drupal, jquery +102 more +104 more
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CVE-2019-11358
Public exploitFix available
EPSS 86.8%
6.1 Medium
-
jquery
Denial of Service in jquery
CVE-2016-10707
Fix available
7.5 High
-
jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more
Cross-Site Scripting (XSS) in jquery
CVE-2015-9251
Public exploitFix available
EPSS 29.7%
6.1 Medium
-
jquery
Cross-Site Scripting in jquery
CVE-2012-6708
Public exploitFix available
6.1 Medium
-
jquery
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors...
CVE-2014-6071
Fix available
6.1 Medium
-
jquery
jQuery vulnerable to Cross-Site Scripting (XSS)
CVE-2011-4969
Fix available
EPSS 19.2%
4.3 Medium
-
jquery, netapp snapcenter +1 more
The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated...
CVE-2007-2379
5.0 Medium