Read the docs

Jquery-sparkle Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Jquery-sparkle Project records in CISA KEV

No Jquery-sparkle Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Jquery-sparkle · all components

TI-2021-03387 CVE-2021-20084 · GHSA-jvjp-w9hw-x66g

Prototype pollution in jQuery Sparkle

Priority MEDIUM 41

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01409 Published 2021-04-23 No fix listed CWE-1321
Open these records in search →