CVE-2011-4969

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

We have discovered 565,726 live websites that are affected by CVE-2011-4969.

Test my site



Affected Software

Product  jQuery
Category JavaScript Libraries
Vulnerable Domains565,726 live websites (2.93% of jQuery install base)
Vulnerable Versions
  • from 0 before 1.6.3
Vulnerable Versions Count332 versions ( 40.19% of all versions)



Details

  • Published - Mar 9, 2013
  • Updated - Aug 7, 2024

CVE-2011-4969 usage by Country

United States170,514 websites


Germany52,607 websites
China34,667 websites
Russia32,839 websites
Japan31,974 websites
France26,834 websites
GB17,687 websites
Canada16,678 websites
Poland14,655 websites
Netherlands11,442 websites

CVE-2011-4969 usage by TLD

.com255,246 websites
.de31,566 websites
.ru29,773 websites
.org22,231 websites
.net21,915 websites
.co.uk12,544 websites
.pl10,978 websites
.jp9,516 websites
.nl9,072 websites
.fr8,008 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2011-4969

Top websites that are affected by CVE-2011-4969. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.com United States***
**.******.com Canada***
*********.com United States***
****.org United States*,***
***********.net China*,***
********.*********.com United States*,***
***.***.cn China*,***
****.ru Russia*,***
*****.***.org United States*,***
*********.de Germany*,***
See full domain list

FAQ

A total of 565,726 websites have been identified as vulnerable to CVE-2011-4969, discovered through global website indexing conducted by WebTechSurvey.
jQuery is susceptible to CVE-2011-4969 vulnerability.
jQuery versions before 1.6.3 are vulnerable to CVE-2011-4969.
Version 1.6.3 of jQuery addresses the CVE-2011-4969 security vulnerability.

References