jQuery.UI.Combined

7 results · Feed

• Medium 6.1
  CVE-2022-31160 Public exploit

  jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label

  jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a labe…

  jquery jquery-ui jquery-ui jquery-ui-rails Debian Ubuntu npm Maven NuGet RubyGems
  Jul 20, 2022
• Medium 6.5
  CVE-2021-41184 Public exploit EPSS 41%

  XSS in the `of` option of the `.position()` util

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

  jquery jquery-ui jQuery.UI.Combined org.webjars.npm:jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2021-41182 Public exploit EPSS 39%

  XSS in the `altField` option of the Datepicker widget

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…

  jquery jquery-ui drupal7 jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2021-41183

  XSS in `*Text` options of the Datepicker widget

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values pas…

  jquery jquery-ui drupal7 jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.1
  CVE-2016-7103 EPSS 29%

  jQuery-UI vulnerable to Cross-site Scripting in dialog closeText

  Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

  drupal7 jquery-ui jquery-ui-rails jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems
  Mar 15, 2017
• Medium —
  CVE-2012-6662

  jquery-ui Tooltip widget vulnerable to XSS

  Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handl…

  jQuery.UI.Combined org.webjars.npm:jquery-ui jqueryui jquery-ui Debian npm Maven NuGet RubyGems
  Nov 24, 2014
• Medium 6.1
  CVE-2010-5312 EPSS 18%

  Cross-site Scripting in jquery-ui

  Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

  drupal7 jqueryui jquery-ui jquery-ui-rails Debian Alpine npm Maven NuGet RubyGems
  Nov 24, 2014