CVE-2014-6071 jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
MediumCVSS 6.1
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jquery | = 1.4.2 | No fix listed |
References
- 20140902 XSS Reflected JQuery 1.4.2 - Create object option in runtime client-side mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- help.ecostruxureit.com