Report question

Question: Can malicious javascript code be injected through $()?