Description
Kayran has detected that the version of the jQuery you use is vulnerable to Cross-site Scripting attacks (XSS).
This can be done by abusing vectors related to use of the “text” method inside after.
This allows an attacker to modify some system files or information. Yet, the attacker does not have control over what can be modified, or very limited in terms of possibilities.
Severity/Score
CVSS Version 3.x – 6.1 Medium
Recommendation
Upgrade the version of the jquery you use.
Since it exists only in versions up until 1.4.2, make sure you upgrade to version higher than 1.4.2.
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6071
