CVE-2018-18405

jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element

published April 22, 2020

CVSS
—
EPSS
2%
Percentile
76.5
In the wild
Unconfirmed
What it is

jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01661 · 76.5th percentile
Published
2020-04-22T17:56Z
EPSS history
Timeline
  • 22 APR 17:56Z
    jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element
    cvelistv5