CVE-2020-7656

MEDIUM · CVSS 6.1 EPSS 6.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-05-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-7656

Severity

MEDIUM

CVSS

6.1

EPSS

6.27%

Original NVD Description

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.