CVE-2011-4969
Description
Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.
Risk Information
Base Score
4.7
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
Exploitation Probability
8.455
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in IBM Security Guardium 11.1 | Windows |
| Vulnerabilities CVE-2011-4969 are fixed in WebJars - jquery 1.6.3 | Windows |
| Multiple Vulnerabilities are affected in IBM Security Guardium 11.0 | Windows |
| Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0 | Windows |
| Vulnerabilities CVE-2011-4969 are fixed in Ruby-jquery-rails 1.0.16 | Windows |
| Vulnerabilities CVE-2011-4969 are fixed in Nuget - jQuery 1.6.3 | Windows |
| Vulnerabilities CVE-2011-4969 are fixed in WebJars - jquery for Linux 1.6.3 | Linux |
| Vulnerabilities CVE-2011-4969 are fixed in Ruby-jquery-rails for Linux 1.0.16 | Linux |
| Vulnerabilities CVE-2011-4969 are fixed in Nuget - jQuery for Linux 1.6.3 | Linux |
| Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability (CVE-2011-4969) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234