CVE-2011-4969

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

We have discovered 366,888 live websites that are affected by CVE-2011-4969.

Run a Free Instant Scan



Affected Software

Product  jQuery
Category JavaScript Frameworks
Vulnerable Domains366,888 live websites (2.28% of jQuery install base)
Vulnerable Versions
  • from 0 through 1.6.3
Vulnerable Versions Count120 versions ( 34% of all versions)



Details

  • Published - Mar 8, 2013
  • Updated - Aug 7, 2024

Website Distribution by Country

Number of websites using CVE-2011-4969
United States105,243 websites


Germany35,158 websites
Japan21,836 websites
Russia20,290 websites
China17,786 websites
France14,759 websites
GB13,446 websites
Canada12,587 websites
Italy10,278 websites
Poland9,165 websites

Website Distribution by TLD

Number of websites using CVE-2011-4969
.com163,434 websites
.de22,438 websites
.ru17,530 websites
.net14,401 websites
.org13,955 websites
.co.uk8,470 websites
.it7,161 websites
.cz7,106 websites
.pl7,097 websites
.jp6,719 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2011-4969

Top websites that are affected by CVE-2011-4969. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**.******.com Canada***
*********.com United States***
****.org United States*,***
***********.net China*,***
***.***.cn China*,***
****.******.**.com China*,***
****.ru Russia*,***
*********.de Germany*,***
**.****.com Hong Kong*,***
***.****.org United States*,***
See full domain list

FAQ

A total of 366,888 websites have been identified as vulnerable to CVE-2011-4969, based on global website indexing conducted by WebTechSurvey.
The jQuery is affected by the CVE-2011-4969 vulnerability.
jQuery versions up to and including 1.6.3 are vulnerable to CVE-2011-4969.

References