system
Describe <CVE-2018-18405>.
user
What is <CVE-2018-18405>?
assistant
jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry.