Skip to content
OpenAdvisories
Medium 1 exploited CVE ICSA-21-306-01 1 CVE

Sensormatic Electronics VideoEdge

Published Nov 2, 2021 · Updated Nov 2, 2021

Vendor: Sensormatic Electronics, LLC, Johnson Controls Product: VideoEdge

Summary

Successful exploitation of this vulnerability could allow the execution of untrusted code when viewing the VideoEdge admin graphical user interface.

Vulnerabilities 1

  • Medium 6.9
    CVE-2020-11023 Exploited Public exploit EPSS 85%

    Potential XSS vulnerability in jQuery

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

    jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
    KEV Jan 23, 2025

Revision history

  1. #1

    ICSA-21-306-01 Sensormatic Electronics VideoEdge

References