data/CVE/list

@@ -36,7 +36,10 @@ CVE-2016-10707 (jQuery before 3.0.0 is vulnerable to Denial of Service (DoS) due
 CVE-2015-9251 (jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks ...)
 	TODO: check
 CVE-2012-6708 (jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) ...)
-	TODO: check
+	- jquery 1.11.3+dfsg-1
+	NOTE: https://bugs.jquery.com/ticket/11290
+	NOTE: https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
+	NOTE: https://snyk.io/vuln/npm:jquery:20120206
 CVE-2018-5776 [XSS vulnerability in MediaElement]
 	- wordpress <unfixed> (bug #887596)
 	NOTE: https://wordpress.org/news/2018/01/wordpress-4-9-2-security-and-maintenance-release/