CVE-2015-9251 @ Npm-jquery-1.6.4

[smaguilarcx]

Vulnerable Package issue exists @ Npm-jquery-1.6.4 in branch master

jQuery before 3.0.0-beta1 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Namespace: CxDemoInABoxRepos
Repository: BodgeitIssue
Repository Url: https://github.com/CxDemoInABoxRepos/BodgeitIssue
CxAST-Project: CxDemoInABoxRepos/BodgeitIssue
CxAST platform scan: eed07198-d1ae-46bb-80fc-88cbc7cbac3c
Branch: master
Application: BodgeitIssue
Severity: MEDIUM
State: NOT_IGNORED
Status: NEW
CWE: CWE-79

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: LOW
Availability impact: NONE
Remediation Upgrade Recommendation: 3.0.0

---

References
Issue
Pull request
Commit