jquery: cross-site scripting
| Package(s): | jquery | CVE #(s): | CVE-2011-4969 | ||||||||||||
| Created: | February 14, 2013 | Updated: | March 13, 2013 | ||||||||||||
| Description: | From the Ubuntu advisory: It was discovered that jQuery incorrectly handled selecting elements using location.hash, resulting in a possible cross-site scripting (XSS) issue. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. | ||||||||||||||
| Alerts: |
| ||||||||||||||