CVE-2021-3988: Jquery Html Xss From Input
User-provided input from an input element `.val()` is passed directly to `.html()`. This can lead to Cross-Site Scripting (XSS). Use `.text()` instead to avoid rendering raw HTML.
Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0
JS
JSgreprules fetch cve-2021-3988-jquery-html-xss-from-input --engine opengrepDescription
User-provided input from an input element `.val()` is passed directly to `.html()`. This can lead to Cross-Site Scripting (XSS). Use `.text()` instead to avoid rendering raw HTML.
Community feedback
0 signals from signed-in users.
- Useful
- 0
- False positive
- 0
- Metadata
- 0