Javascript vulnerability

[Margie_G]

#762883

After running a security check on their website, my client sent this query regarding Javascript vulnerability.

[quote]Looks like the code has been built referencing an old vulnerable version of JQuery. Version 3+ resolves this but it seems to be a major upgrade that has the potential to break old browser support code.
https://blog.jquery.com/2016/06/09/jquery-3-0-final-released/
There’s some guidance here: https://stackoverflow.com/questions/37271931/how-to-insert-jquery-code-in-avada-theme,
This appears to be an issue with the code created by Avada.[unquote]

I read elsewhere that this is a WordPress issue.

Can anyone provide some clarity here. Many thanks.

[Michael C]

#763116

Hi @Margie_G

A vulnerability where exactly? It sounds like they are referring to a vulnerability in old bootstrap versions. In which case those have all been patched since version 5.7.2 of the theme.

Thanks

[Jetxpert-Envato]

#765722

@Margie_G,

Please allow me to jump in.

The jQuery issue (ongoing) lies with WordPress, not Avada.

Click here for more details and status.

Cheers!

[Author]

Posts