vulnerability

jQuery Vulnerability: CVE-2014-6071

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Jan 16, 2018

Added

Feb 6, 2018

Modified

Mar 30, 2026

Description

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

jquery-upgrade-1_11_1

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.