Lebanese Gov Website Exploits

Vulnerable component: jquery v1.5.1
[!] Component location: https://www.cnss.gov.lb//modules/mod_klixo_articles_slider/assets/jquery-1.5.1.min.js
[!] Total vulnerabilities: 4
[!] Summary: XSS with location.hash
[!] Severity: medium
[!] CVE: CVE-2011-4969
[!] Summary: 3rd party CORS request may execute
[!] Severity: medium
[!] CVE: CVE-2015-9251
[!] Summary: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
[!] Severity: low
[!] CVE: CVE-2019-11358
[!] Summary: Selector interpreted as HTML
[!] Severity: medium
[!] CVE: CVE-2012-6708

If I decided to attack Lebanon I would start by leaking my entry point to create a diversion.
#TheRealGhostSec