
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added a five-year-old cross-site scripting (XSS) vulnerability identified as CVE-2020-11023, found in the widely-used jQuery JavaScript library, to its Known Exploited Vulnerabilities (KEV) catalog. Despite this medium-severity flaw being patched in April 2020 with the release of jQuery version 3.5.0, it continues to pose significant risks due to ongoing evidence of