urlquery dot net website jquery-1.8.3.js vulnerable to to Selector XSS!

polonus · 2015-06-29T15:17:28.000Z

jQuery Versions Vulnerable to Selector XSS with class Attribute (‘. XSS_VECTOR’), see: http://domstorm.skepticfx.com/modules?id=529bbe6e125fac0000000003
found in the source code of urlquery dot net website →
http://www.domxssscanner.com/scan?url=https%3A%2F%2Furlquery.net%2Fjavascript%2Fjquery-1.8.3.js
This scanner site is also vulnerable because of vulnerable version jQuery 1.7.2
Why isn’t this CMS not being regularly updated and (fully) patched?

polonus (volunteer website security scanner and website error-hunter)

Para-Noid · 2015-06-29T17:53:56.000Z

It would seem that a reputable site as that would take extra precautions.

Announcements