CVE-2024-30875

EIP tracks 1 public exploit for CVE-2024-30875. PoCs published by Ant1sec-ops.

AI-analyzed exploit summary The repository provides a technical analysis of a Cross-Site Scripting (XSS) vulnerability in jquery-ui v1.13.1, detailing the attack vector, payload example, and impact. It includes a proof-of-concept URL demonstrating the vulnerability but lacks functional exploit code.

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, and because the exploitation example does not indicate whether, or how, the example website is using jQuery UI.