https://pwn.watch/t/jquery Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 23 Jan 2025 00:00:00 GMT https://pwn.watch/i/jquery-cve-2020-11023 https://pwn.watch/i/jquery-cve-2020-11023 Thu, 23 Jan 2025 00:00:00 GMT medium <p>JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser. Added to CISA KEV on 2025-01-23.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-01-23: CISA added CVE-2020-11023 to the KEV catalog (due 2025-02-13).</li></ul> <p><strong>CVEs:</strong> CVE-2020-11023</p>