Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

\", which results in the enclosed script logic to be executed.","url":"https://cvebuzz.com/cve/CVE-2020-7656","datePublished":"2020-05-19T21:15:10.257000Z","dateModified":"2026-06-17T03:25:12.767000Z","isPartOf":{"@type":"WebSite","name":"cvebuzz","url":"https://cvebuzz.com"}}

CVE detail

CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CVSS 6.1 · Medium