CVE-2018-18405

** DISPUTED ** jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry.

Date published : 2020-04-22

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W/

https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4