{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: JQuery vulnerabilities","home_page_url":"https://patchfirst.co/vendor/jquery/","feed_url":"https://patchfirst.co/feed/vendor/jquery.json","description":"New and newly exploited JQuery CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2020-11023#kev","url":"https://patchfirst.co/cve/CVE-2020-11023/","title":"[KEV] CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability","content_text":"JQuery · JQuery. In CISA KEV since 2025-01-23. ENISA EUVD lists it as exploited. EPSS 84.9% (higher than 99.71% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1204.001 Malicious Link; T1059.007 JavaScript; T1557 Adversary-in-the-Middle. Priority 67.2 of 100.","summary":"JQuery Cross-Site Scripting (XSS) Vulnerability","date_published":"2025-01-23T00:00:00.000Z","date_modified":"2026-06-17T02:48:52.000Z","tags":["kev","public-exploit","T1204.001","T1059.007","T1557"],"_patchfirst":{"reason":"kev","priority":67.2,"kev":{"dateAdded":"2025-01-23","ransomware":false},"epss":{"score":0.84887,"percentile":0.99711},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"JQuery","product":"JQuery","techniqueIds":["T1204.001","T1059.007","T1557"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-11022","url":"https://patchfirst.co/cve/CVE-2020-11022/","title":"CVE-2020-11022: jQuery has a potential XSS vulnerability","content_text":"jquery · jQuery. Not in CISA KEV. EPSS 99.2% (higher than 99.94% of CVEs). CVSS 6.9 MEDIUM. Public exploit code exists. Priority 67.8 of 100.","summary":"jQuery has a potential XSS vulnerability","date_published":"2020-04-29T00:00:00.000Z","date_modified":"2026-04-13T13:53:08.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67.8,"kev":null,"epss":{"score":0.99215,"percentile":0.99935},"cvss":{"score":6.9,"severity":"MEDIUM","version":"3.1"},"vendor":"jquery","product":"jQuery","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}