Cross-site Scripting in jquery.json-viewer

MEDIUM 6.1CVE-2022-30241 · GHSA-qp2q-6h9j-jg2r · Published 04/05/2022 · updated 17/06/2026

In short

CVE-2022-30241 is a MEDIUM (CVSS 6.1) vulnerability affecting jquery json-viewer (jquery json-viewer project), jquery.json-viewer.
Chance of exploitation in the next 30 days (EPSS): 0.71%, higher than 54.0% of all vulnerabilities.
Fix: update to 1.5.0 or later.

Package	Affected versions	Patched versions
jquery json-viewer jquery_json-viewer_project	`≤ 1.4.0`	No fix yet
jquery.json-viewer npm	`< 1.5.0`	`1.5.0`

Description

The jquery.json-viewer library before version 1.5.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.

NVD description

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.

References

nvd.nist.gov/vuln/detail/CVE-2022-30241 · ADVISORY
abodelot/jquery.json-viewer#26 · WEB
abodelot/jquery.json-viewer · PACKAGE
abodelot/jquery.json-viewer release v1.5.0 · WEB
npmjs.com/package/jquery.json-viewer · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free