Logo
vulnerabilityCVE-2025-3573
Name
CVE-2025-3573
Source
NVD ( link)Debian ( link)
Description
Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
jquery-validation
Exploitable

Vulnerability Ratings#


5.3
CVSSv4
6.1
CVSSv31
NaN
other