Multiple jQuery XSS Vulnerabilities Affecting Versions Prior to 1.9.0
Article Content
Browse articles 
Two critical Cross-site Scripting (XSS) vulnerabilities in jQuery have been identified, affecting versions prior to 1.9.0 and 1.6.3. CVE-2012-6708 allows attackers to exploit the jQuery(strInput) function due to improper handling of HTML input, while CVE-2011-4969 enables injection of arbitrary scripts via location.hash. Users of these vulnerable jQuery versions are at risk of remote attacks.
Ask AI about this cluster
Answers cite the sources they use
Updated 222d ago How this analysis works
Timeline
2013-03-08
CVE-2011-4969 published
2018-01-18
CVE-2012-6708 published
2026-02-18
Information published about vulnerabilities
More articles in this cluster (2)
Following this threat?
Track CVE-2011-4969 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
,p_Ii9kYXRhYmFzZS93b3JkcHJlc3MvcGx1Z2luL3NpdGVza2l0ZS92dWxuZXJhYmlsaXR5L3dvcmRwcmVzcy1zaXRlc2tpdGUtcGx1Z2luLTItMS04LXJlbW90ZS1jb2RlLWV4ZWN1dGlvbi1yY2UtdnVsbmVyYWJpbGl0eSI,s__DbMe5dVBwz8g5hf.png)
Multiple WordPress Plugins Face Vulnerabilities Requiring Immediate Updates Three WordPress plugins have been reported with vulnerabilities: the GiveWP plugin (version 4.16.9) has a Cross Site Scripting (XSS) vulnerability, while both the Siteskite (version 2.1.8) and Cartflows (version 3.2.0) plugins have Remote Code Execution (RCE) vulnerabilities. The XSS vulnerability allows attackers to…