" HTML tags that contain a whitespace character, i.e: " " HTML tags that contain a whitespace character, i.e: " " HTML tags that contain a whitespace character, i.e: "
Vulnetix
Try Vulnetix Request Demo
CVE-2020-7656 PUBLISHED

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

EPSS 1.10% · 78.0th percentile

Risk Scores

EPSS Score
1.10%
78.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSjquery0, 1.7.2+dfsg-3ubuntu2, 1.11.3+dfsg-4
Ubuntu:Pro:14.04:LTSjquery1.7.2+dfsg-2ubuntu1, 1.7.2+dfsg-2ubuntu1+esm1, 0

Timeline

References

Open in Interactive Console →