CVE-2014-6071 @ Npm-jquery-3.6.0

[Abdul1110]

Vulnerable Package issue exists @ Npm-jquery-3.6.0 in branch master

jQuery can potentially allow remote attackers to conduct Cross-site scripting (XSS) attacks when using methods such as jQuery(), append() and after(). These methods accept an HTML string and can, by design, execute code. This can be avoided by sanitizing inputs when obtained from untrusted sources.

Namespace: Abdul1110
Repository: TEST_ORION
Repository Url: https://github.com/Abdul1110/TEST_ORION
CxAST-Project: Abdul1110/TEST_ORION
CxAST platform scan: 19490220-b272-4b92-94fa-50af22248f60
Branch: master
Application: TEST_ORION
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-79

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: LOW
Availability impact: NONE

---

References
Disclosure
Advisory