● CVE — Medium
CVE-2020-11022
Vendordebian, fedoraproject, jquery, oracle, drupalProductdebian linux, fedora, jquery, financial services balance sheet planning, financial services analytical applications infrastructure, financial services asset liability management, financial services analytical applications reconciliation framework, agile product lifecycle management for process, communications services gatekeeper, communications webrtc session controller, enterprise manager ops center, financial services data integration hub, communications billing and revenue management, drupal, communications eagle application processor, application testing suite, financial services basel regulatory capital basic, financial services basel regulatory capital internal ratings based approach, communications application session controller, banking digital experience, blockchain platform, communications diameter signaling router idih\, financial services data foundation, enterprise session border controller, financial services data governance for us regulatory reportingDiscoveredApr 29, 2020UpdatedApr 13, 2026
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.