ibnurusdianto/cve-2020-11022Proof-of-concept exploit for CVE-2020-11022, a DOM-based XSS vulnerability in jQuery versions below 3.5.0. Demonstrates payload injection via .html() method to trigger cross-site scripting.
So here's the thing guys, CVE-2020-11022 is a vulnerability in jQuery versions below 3.5.0 or above, CVE-2020-11022 itself triggers an XSS by leveraging DOM Manipulation (e.g., .html(), .append(), and others) to execute malicious XSS code.
Verify jQuery Version: Make sure the target uses a vulnerable jQuery version. This vulnerability applies to jQuery versions below 3.5.0 (versions 3.5.0 and above are patched).
Identify Target Elements (Dump IDs): Collect (dump) all id attributes from the HTML elements on the page. This is done to find elements that the application might use as a sink to process input using DOM manipulation methods.
Select an Element for Testing: Choose one element ID from the previous extraction results. For example, let's assume there is an element with the ID #error-msg.
Execute the Payload: Trigger DOM manipulation by injecting the payload into the target sink (e.g., the .html() method).
Injection syntax: $('#error-msg').html(payload)
<style><style />
onerror attribute will be executed directly by the browser (Triggered/BOOM), displaying an alert as proof (Proof of Concept).