jQuery – XSS Vulnerability Under 3.5.0, When Using htmlPrefilter

< 1 min read

Impact Area

Security

 

 

 

Severity

High

 

 

 

Affected Element

ServiceNow

UI Script

Salesforce

Static Resource

Rule number #

SN-JSL-001 (for ServiceNow)

SF-JSL-001 (for Salesforce)

Impact #

Increased vulnerability to cross-site scripting attacks.

Remediation #

Update jQuery to the latest version.

Time to fix #

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).

Updated on March 21, 2025
Was it helpful ?