jQuery Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2011-4969 - Vulnerability Database

jQuery

jQuery Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2011-4969

Medium

Reference: CVE-2011-4969

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-4969

Title: jQuery Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3 when using location.hash to select elements allows remote attackers to inject arbitrary web script or HTML via a crafted tag.