" HTML tags that contain a whitespace character, i.e: " " HTML tags that contain a whitespace character, i.e: " " HTML tags that contain a whitespace character, i.e: "
VDB

CVE-2020-7656

CVE-2020-7656 PUBLISHED

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

EPSS 0.89% · 75.9th percentile

Risk Scores

EPSS Score
0.89%
75.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSjquery0, 1.11.3+dfsg-4, *
Ubuntu:Pro:14.04:LTSjquery1.7.2+dfsg-2ubuntu1+esm1, 0, 1.7.2+dfsg-2ubuntu1

Exploit Intelligence

…and 19 more exploits

Timeline

  • May 19, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 28, 2022 EPSS Score
  • May 1, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Nov 6, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›