{"cvss":0.0,"datePublished":"2021-01-21T00:00:00Z","dateUpdated":"2021-01-21T00:00:00Z","description":"In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","dueDate":"","id":"CVE-2020-11022","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"JQuery","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"JQuery JQuery Improper Neutralization of Input During Web Page Generation","vendor":"JQuery"}