Description

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

Remediation

References

CVE-2011-4969

Related Vulnerabilities

Apache HTTP Server Heap-based Buffer Overflow Vulnerability (CVE-2026-34356)

PHP Numeric Errors Vulnerability (CVE-2009-4418)

WordPress Plugin Auto Amazon Links-Amazon Associates Affiliate Unspecified Vulnerability (2.0.3.4)

WebLogic CVE-2019-2887 Vulnerability (CVE-2019-2887)

WordPress Plugin Users Ultra Membership Arbitrary File Upload (1.5.58)

Severity

Medium

Classification

CVE-2011-4969 CWE-707

Tags

Missing Update Known Vulnerabilities