CVE-2018-18405

6.1

MEDIUMCVSS v3

Published

April 22, 2020

CVSS v2

4.3 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry

jquery/jquery

GitHubjQuery JavaScript Library

= 2.2.2NVD

jquery

NPMJavaScript library for DOM operations

= 2.2.2NVD

@types/jquery

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for jquery

= 2.2.2NVD

@ember/jquery

NPMThe default blueprint for ember-cli addons.

= 2.2.2NVD

jquery

Python Package IndexJquery javascript library for TurboGears

= 2.2.2NVD

jQuery

NuGet GalleryjQuery is a new kind of JavaScript Library. jQuery is a fast and concise JavaScript Library that simplifies HTML document traversing, event handling, animating, and Ajax interactions for rapid web development. jQuery is designed to change the way that you write JavaScript. NOTE: This package is maintained on behalf of the library owners by the NuGet Community Packages project at http://nugetpackages.codeplex.com/

= 2.2.2NVD

jquery

RubyGemsjQuery for Ruby.

= 2.2.2NVD

Security Advisories

CVE-2018-18405

Description

More on this CVE