This exploit leverages two vulnerabilities in jQuery: CVE-2020-7656 which allows for XSS through improper script handling, and CVE-2019-11358 which leads to XSS due to Prototype Pollution. By injecting payloads into a vulnerable page running jQuery versions prior to 3.4.X, malicious actors can run arbitrary JavaScript code in the victim's browser.
A Cross-Site Scripting (XSS) vulnerability exists in jQuery versions greater than or equal to 1.2 and before 3.5.0. An attacker can inject malicious code into the vulnerable application, which will be executed in the victim's browser. Proof of Concept 1: <option><style></option></select><img src=x onerror=alert(1)></style>
jQuery versions greater than or equal to 1.0.3 and before 3.5.0 are vulnerable to Cross-Site Scripting (XSS). Two proof of concepts have been provided, one for jQuery versions greater than or equal to 1.0.3 and before 3.5.0 and the other for jQuery 3.x. The first proof of concept involves using a style tag with an img tag containing an onerror attribute. The second proof of concept involves using an img tag with an alt and title attribute containing a malicious payload.
Services By CQR