Beveiligingsadvies

CVE-2025-3573

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-15 05:00:09
Laatst bijgewerkt 2025-04-15 15:03:53
Toegewezen door snyk
CVSS-score 6.1
Status PUBLISHED

Beschrijving

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary.