Athlon1600 Youtube-Downloader vulnerabilities

1 known vulnerability affecting athlon1600/youtube-downloader.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-11022MEDIUMExploitedPoC≥ 0, ≤ 4.0.02020-04-29

CVE-2020-11022 [MEDIUM] CWE-79 Potential XSS vulnerability in jQuery Potential XSS vulnerability in jQuery ### Impact Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. `.html()`, `.append()`, and others) may execute untrusted code. ### Patches This problem is patched in jQuery 3.5.0. ### Workarounds To workaround the issue without upgrading, adding the following to your code: ```js jQuery.htmlPrefilter = function( html ) { retu