---
title: jQuery – XSS Vulnerability On Versions Under 3.5.0, Via The htmlPrefilter Method
description: "**Impact area** Security **Severity** High **Affected element** **ServiceNow** UI Script **Salesforce** Static Resource ## Rule number **SN-JSL-JQUERY-LESSTHAN-V350**(for ServiceNow) **SF-JSL-JQUERY-LESSTHAN-V350**(for Salesforce) ## Impact jQuery used a regex in its jQuery.htmlPrefilter method to ensure that all closing tags were XHTML-compliant when passed…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/jquery-xss-vulnerability-on-versions-under-3-5-0-via-the-htmlprefilter-method/"
updated: "2025-03-21"
category: Rules
---

# jQuery – XSS Vulnerability On Versions Under 3.5.0, Via The htmlPrefilter Method

**Impact area**

Security

**Severity**

High

**Affected element**

**ServiceNow**

UI Script

**Salesforce**

Static Resource

## Rule number

**SN-JSL-JQUERY-LESSTHAN-V350**(for ServiceNow)

**SF-JSL-JQUERY-LESSTHAN-V350**(for Salesforce)

## Impact

jQuery used a regex in its jQuery.htmlPrefilter method to ensure that all closing tags were XHTML-compliant when passed to methods. An issue has been reported that demonstrated the regex could introduce a cross-site scripting (XSS) vulnerability.

## Remediation

Update jQuery to the latest version.

### Time to fix

30 min