Vendor
Jquery
15 known vulnerabilities in products by Jquery, 1 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-11023 | Potential XSS vulnerability in jQuery In CISA KEValso in 48 other products | 6.9 | |
| Medium | CVE-2020-11022 | jQuery has a potential XSS vulnerability | 6.9 | |
| Medium | CVE-2021-41184 | XSS in the `of` option of the `.position()` util | 6.5 | |
| Medium | CVE-2021-41182 | XSS in the `altField` option of the Datepicker widget | 6.5 | |
| Medium | CVE-2019-11358 | Drupal core: security vulnerability | 6.1 | |
| Medium | CVE-2015-9251 | jQuery: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2021-41183 | XSS in `*Text` options of the Datepicker widget | 6.5 | |
| Medium | CVE-2012-6708 | jQuery: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2020-7656 | Jquery: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2016-10707 | jQuery: Denial of Service | 7.5 | |
| Medium | CVE-2022-31160 | Jquery-ui: Cross-site Scripting | 6.1 | |
| Medium | CVE-2014-6071 | jQuery: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-18405 | jQuery: Cross-Site Scripting (XSS) | 6.1 | |
| Not rated | CVE-2011-4969 | jQuery: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2007-2379 | jQuery: security vulnerability | — |