Ecosystem
Packagist
7,164 known vulnerabilities.
Most affected packages
moodle/moodle 437
magento/community-edition 360
typo3/cms 188
magento/project-community-edition 161
wwbn/avideo 160
drupal/core 150
pimcore/pimcore 135
typo3/cms-core 128
dolibarr/dolibarr 127
craftcms/cms 127
concrete5/concrete5 121
thorsten/phpmyfaq 112
phpmyadmin/phpmyadmin 107
microweber/microweber 106
librenms/librenms 106
symfony/symfony 102
getgrav/grav 99
silverstripe/framework 93
snipe/snipe-it 81
drupal/drupal 81
mantisbt/mantisbt 74
shopware/platform 70
shopware/core 65
froxlor/froxlor 60
mautic/core 57
baserproject/basercms 56
getkirby/cms 51
admidio/admidio 50
phpmyfaq/phpmyfaq 47
statamic/cms 44
nilsteampassnet/teampass 42
intelliants/subrion 42
showdoc/showdoc 42
contao/core-bundle 40
ci4-cms-erp/ci4ms 36
phpoffice/phpspreadsheet 35
shopware/shopware 34
zendframework/zendframework1 34
kimai/kimai 33
prestashop/prestashop 31
1 result · Clear filters · Feed
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025