CVE-2021-44030

—

CVSS 3.1

6.1 medium

EPSS

4%p90

Published

Dec 22, 2021 (Dec 22, 2021)

Modified

Jun 17, 2026

Description

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.

Vendors: quest
Products: kace desktop authority
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (4.2%)

In the news0 stories

No ingested article mentions this CVE yet.