Search for packages
| purl | pkg:composer/components/jquery@1.0.3 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fhgh-jkwa-aaah
Aliases: CVE-2020-11023 GHSA-jpcq-cgw6-v4j6 |
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T20:04:04.671272+00:00 | GHSA Importer | Affected by | VCID-fhgh-jkwa-aaah | https://github.com/advisories/GHSA-jpcq-cgw6-v4j6 | 36.0.0 |
| 2025-03-28T16:48:35.418178+00:00 | GitLab Importer | Affected by | VCID-fhgh-jkwa-aaah | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/components/jquery/CVE-2020-11023.yml | 36.0.0 |