CVE-2020-11023 @ Npm-jquery-1.6.4

[smaguilarcx]

Vulnerable Package issue exists @ Npm-jquery-1.6.4 in branch master

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Namespace: CxDemoInABoxRepos
Repository: BodgeitIssue
Repository Url: https://github.com/CxDemoInABoxRepos/BodgeitIssue
CxAST-Project: CxDemoInABoxRepos/BodgeitIssue
CxAST platform scan: eed07198-d1ae-46bb-80fc-88cbc7cbac3c
Branch: master
Application: BodgeitIssue
Severity: MEDIUM
State: NOT_IGNORED
Status: NEW
CWE: CWE-79

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: LOW
Availability impact: NONE
Remediation Upgrade Recommendation: 3.5.0

---

References
Advisory
Release Note
Pull request
Commit