XSS Archives - 7ASecurity Blog

Don't Let jQuery 3.5.1 Vulnerabilities Panic Your Risk Team

Admin — Fri, 17 Jul 2026 07:18:30 +0000

Searches for jQuery 3.5.1 vulnerabilities often mix up older jQuery XSS issues with scanner noise. The major 2020 DOM manipulation flaws, CVE-2020-11022 and CVE-2020-11023, affected versions before 3.5.0. jQuery 3.5.1 followed 3.5.0 and kept those fixes while addressing a regression. Teams should still check loaded versions, old bundled copies, plugins, unsafe DOM insertion, and output …

The post Don't Let jQuery 3.5.1 Vulnerabilities Panic Your Risk Team appeared first on 7ASecurity Blog.

XXE Exposed Webinar Recording and Slides

Admin — Fri, 25 Jul 2014 19:50:00 +0000

In case someone is interested, I had the pleasure of giving a Webinar for eLearnSecurity on Tuesday this week: Webinar Title: "XXE Exposed" Summary: Brief coverage of Web Service Types, SQLi and XSS against Web Services to then talk about XXE and XEE attacks and mitigation.Heavily inspired on the "Practical Web Defense" (PWD) style of pwnage + …

The post XXE Exposed Webinar Recording and Slides appeared first on 7ASecurity Blog.

Embedding untrusted HTML XSS+ challenge

Admin — Thu, 26 Jan 2012 13:24:00 +0000

Where this came from - skip to the end for the challenge if you do not care 🙂 During the OWTF workshop at BSides Vienna the interaction with the audience was great. For the purpose of this blog post the conversation on embedding HTML input from an untrusted source developed as follows: - Olaf first asked …

The post Embedding untrusted HTML XSS+ challenge appeared first on 7ASecurity Blog.