jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
medium
The jQuery Manager for WordPress plugin for WordPress is running a vulnerable version of jQuery in all versions up to, and including, 1.10.4 and the Enable jQuery Migrate Helper for WordPress is running a vulnerable version of jQuery in all versions up to, and including, 1.4.1. This makes it possible for unauthenticate...
- CVSS:
- 6.5
- Affected:
- up to 1.10.4
- Fixed in:
- 1.10.5
- Disclosed:
- Jul 20, 2020
CVE-2020-11023 on NVD →
jQuery Manager for WordPress [jquery-manager] < 1.10.5
unknown
[en] In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
- Affected:
- up to 1.10.5
- Fixed in:
- 1.10.5
- Disclosed:
- Apr 29, 2020
CVE-2020-11023 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database