Joomla 3 JQuery problem - outdated version?

General questions relating to Joomla! 3.x.

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting.
Forum Post Assistant - If you are serious about wanting help, you should use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10
Post Reply
kweb
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Wed Jul 20, 2011 9:48 am

Joomla 3 JQuery problem - outdated version?

Post by kweb » Mon Jul 04, 2022 12:08 pm

Hi there,
I have a problem with my 3.10.10 website. I have an older website for a volkswagen car dealer. The owner of the car company got emailed by a security plattform volkswagen is working with, that there is a problem of Cross Site Scripting Vulnerability on his website.

I have checked my website with pentest tools website scanner and I am receiving following problems Image

I checked out and saw, that version 1.12.4 of jquery is the standard jquery version joomla is working with, located in /media/jui/js. But it seems that this can result in xss problems?! So what can I do now? I need to solve this problem otherwise we get blacklisted with the page in 3 months.

I hope someone can help,
kweb

gws
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4749
Joined: Tue Aug 23, 2005 1:56 pm
Location: South coast, UK
Contact:

Re: Joomla 3 JQuery problem - outdated version?

Post by gws » Mon Jul 04, 2022 12:12 pm

Admin tools pro has XSS protection,might be worth a look.

SharkyKZ
Joomla! Hero
Joomla! Hero
Posts: 2236
Joined: Fri Jul 05, 2013 10:35 am
Location: Parts Unknown

Re: Joomla 3 JQuery problem - outdated version?

Post by SharkyKZ » Mon Jul 04, 2022 2:20 pm

jQuery included in J3 has been modified to include security fixes from newer jQuery versions. So this shouldn't be a real problem. If you're still worried about some automatic tools detecting it as vulnerable, you can use a plugin to load a newer version. But be aware this could break something.

kweb
Joomla! Apprentice
Joomla! Apprentice
Posts: 10
Joined: Wed Jul 20, 2011 9:48 am

Re: Joomla 3 JQuery problem - outdated version?

Post by kweb » Mon Jul 04, 2022 6:43 pm

The problem is that we HAVE TO SOLVE IT otherwise we will get blacklisted. I also dont think that this is a real problem but thats not the point. Thanks for the tipps - I will try to figure out. Btw. would it be a solution to upgrade to J4?

SharkyKZ
Joomla! Hero
Joomla! Hero
Posts: 2236
Joined: Fri Jul 05, 2013 10:35 am
Location: Parts Unknown

Re: Joomla 3 JQuery problem - outdated version?

Post by SharkyKZ » Tue Jul 05, 2022 5:03 am

Yes, that would solve your problem too.


Post Reply

Return to “General Questions/New to Joomla! 3.x”