Cross-site Scripting Vulnerability in jQuery Validation Package
CVE-2025-3573
5.3MEDIUM
Summary
The jQuery Validation package prior to version 1.20.0 is vulnerable to a Cross-site Scripting (XSS) attack triggered by the showLabel() function. This vulnerability allows attackers to exploit a user-controlled placeholder value, leading to potentially harmful content being executed in the user's browser. By manipulating this input, an attacker could introduce malicious scripts that may compromise user data or hijack user sessions. It is essential to update to the latest version to mitigate any risks associated with this vulnerability.
Affected Version(s)
jquery-validation 0 < 1.20.0
References
CVSS V4
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Volkan Ceylan