CVE-2021-44030: Quest KACE Desktop Authority

Medium severity, CVSS 6.1. EPSS: 4.2% chance of exploitation in the next 30 days.

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery.

Affected products

• Quest KACE Desktop Authority: from 10.0, before 11.2 (fixed in 11.2)

Published 2021-12-22. Last modified 2026-06-17.