CVE-2018-18405 is a vulnerability in jQuery
Published on April 22, 2020
jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry
Products Associated with CVE-2018-18405
Want to know whenever a new CVE is published for jQuery? stack.watch will email you.
Exploit Probability
EPSS
0.30%
Percentile
52.80%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.