XSS vulnerability in unmaintained JavaScript library poses severe risk

guest · May 7, 2019

XSS vulnerability in unmaintained JavaScript library poses severe risk
Ditch jQuery Mobile, urges security researcher
May 7, 2019
https://portswigger.net/daily-swig/...intained-javascript-library-poses-severe-risk

Developers ought to migrate away from jQuery Mobile (JQM) following the discovery of a cross-site scripting (XSS) vulnerability in the unmaintained but still widely used platform.
JQM is a JavaScript library that offers a touch-optimized web framework for smartphones and tablet devices.

After going public with his findings through a detailed blog post on Friday, Nurminen is encouraging developers to move from JQM towards alternative platforms.
Ditching the technology is being recommended because JQM is no longer actively maintained, so no patch (at least from its original developers) is likely.

Nurminen said: “Partial fixes exist in the form of PRs [pull requests], but ever having them merged is unlikely, let alone that there’d be a new release.”
Click to expand...

Log in or Sign up

XSS vulnerability in unmaintained JavaScript library poses severe risk

guest Guest

Log in or Sign up

XSS vulnerability in unmaintained JavaScript library poses severe risk

guest Guest

Useful Searches