JA Extension Manager and jQuery 1.8.2 vulnerability

edwin-van-ree

Hi Joomlart support,

With all these business being attacked in Australia, we started to check all our server with Greenbone OpenVAS.
My webserver that hosts many Joomlart sites, with the JA Extension Manager v2.7.4, showed a jQuery vulnerability in v1.8.2 to Cross-site Scripting (XSS) attacks. See also CVE-2012-6708 and https://bugs.jquery.com/ticket/11290.
Is it possible to upgrade to jQuery 1.9.0 and can you please post an updated JA Extension Manager?

Regards, Edwin

saguaros

Hi Edwin

Our JA Extension manager component has v1.8 in the package but it will not be loaded on your site, after installing into your site, it will use jQuery v.1.12 of Joomla instead so pls don't worry.

If you or your webserver hosting find that the jQuery v1.8 is being loaded on your site from our JA Extension manager, just let us know.