Back

MEDIUM

jquery: Cross-site scripting via cross-domain ajax requests

Published Jan 18, 2018

Description

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (59)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 18, 2018
Updated Aug 6, 2024
Reserved Jan 18, 2018
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Jun 27, 2015
GHSA-RMXG-73GG-4P98