Prototype Pollution Vulnerability in jQuery Plugin Query Object Affects WordPress

CVE-2021-20083

What is CVE-2021-20083?

The jQuery Plugin Query Object version 2.2.3 contains a vulnerability that allows attackers to perform improper modification of Object prototype attributes, known as Prototype Pollution. This vulnerability enables a malicious user to inject malicious properties into Object.prototype, potentially leading to unexpected behavior in web applications using this plugin. This can be exploited to manipulate application logic, escalate privileges, or cause other unintended consequences. It is crucial for users and developers to apply security measures and updates to mitigate such risks.

References