Cross-Site Scripting Vulnerability in jQuery by jQuery Foundation
CVE-2018-18405

6.1MEDIUM

Key Information:

Vendor: Jquery
Status: Jquery
Vendor: CVE Published:; 22 April 2020

What is CVE-2018-18405?

A vulnerability in jQuery v2.2.2 allows attackers to exploit an XSS flaw via a maliciously crafted 'onerror' attribute within an IMG element. This can potentially enable attackers to execute arbitrary scripts in the context of an affected user's browser session, leading to data theft or further exploitation of the web application. It is critical for developers and web administrators to apply security best practices and ensure that jQuery is updated to mitigate this issue.