CVE Database
/

CVE-2015-9251

Back to search

CVE-2015-9251

Published: Jan 18, 2018

Modified: Aug 6, 2024

PUBLISHED

Description

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

VendorProductVersions

n/a

n/a

affected
n/a

References

105658
vdb-entry
x_refsource_BID
20190509 dotCMS v5.1.1 Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
20190510 dotCMS v5.1.1 Vulnerabilities
mailing-list
x_refsource_FULLDISC
RHSA-2020:0481
vendor-advisory
x_refsource_REDHAT
RHSA-2020:0729
vendor-advisory
x_refsource_REDHAT
openSUSE-SU-2020:0395
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now