CVE-2022-31160
Published Jul 20, 2022jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site s…
Vendor/product archive
jqueryui / jquery_ui CVEs
Beta · best-effort7 CVEs tagged to jqueryui / jquery_ui — 0 Critical, 0 High, 7 Medium, 0 Low, 0 Unrated.
CVE-2021-41184
Published Oct 26, 2021jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execu…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-41183
Published Oct 26, 2021jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources ma…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-41182
Published Oct 26, 2021jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2016-7103
Published Mar 15, 2017Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog f…
CVE-2012-6662
Published Nov 24, 2014Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject a…
CVE-2010-5312
Published Nov 24, 2014Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-7 of 7 CVEsPage 1 of 1