Description
Mirador users less than v3.0.0 (alpha-rc) versions that have an unpatched jQuery. When adopters update jQuery they will find some of Mirador functionality to be broken.
Recommendation
Update the mirador package to the latest compatible version. Followings are version details:
- Affected version(s): <= 2.7.2
- Patched version(s): 3.0.0-alpha.0
References
Could your website be exposed too?
SmartScanner can check your website for Potential XSS in jQuery dependency in Mirador and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Potential XSS vulnerability in jQuery - jquery - CVE-2020-11022
- Potential XSS vulnerability in jQuery - CVE-2020-11023
- CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover - CVE-2024-43411
- YUI Cross-site Scripting (XSS) vulnerability - yui - CVE-2013-4941
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023