Analysis Reveals Vulnerabilities in UK Charity Websites

We analysed almost 100 UK charity websites and found that ~1 in 6 are running vulnerable JavaScript dependencies. The analysis revealed that some vulnerabilities were over 10 years old, including those rated as high or critical severity. The same jQuery vulnerability (CVE-2015-9251) was identified across multiple organizations. Similar patterns were also observed in the higher education, further education, and hospitality sectors.