Software age

Update old jQuery code

Why this matters

jQuery is shared code used by some websites. Versions before 3.5.0 have cross-site scripting flaws, where harmful code can run in a visitor's browser: CVE-2020-11022 and CVE-2020-11023.

What to do

1. Make a backup and ask which theme, add-on or page includes jQuery. A theme controls the design; an add-on provides extra features. Update the component that supplies jQuery rather than just changing its filename.
2. Have the site updated to the latest jQuery 3.x. Try the change on a test copy first, then check menus, forms and other features that use it.
3. What to tell your web developer: The checker found jQuery older than 3.5.0, affected by CVE-2020-11022 and CVE-2020-11023. Please update to the latest 3.x and re-test the pages that use it.

How to check the fix

Test important pages and run the checker again. It should no longer flag an old jQuery version. A pass only covers the flaws this checker looks for.