CVE advisoryKnown Exploit
CVE-2020-11023
jQuery Vulnerability Allows Untrusted Code Execution.
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
When untrusted HTML with `<option>` elements is processed by certain jQuery methods, unauthorized code may execute within the user's browser. This presents a risk of unauthorized code execution, impacting organizations that use affected versions of jQuery. The business risk involves potential unauthorized actions withi