jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label

🗓️ 18 Jul 2022 17:07:36Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 166 Views

jQuery UI checkboxradio XSS vulnerabilit

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	10 Jul 202416:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jQuery affect IBM Tivoli Netcool Impact	1 Dec 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2021-41182, CVE-2022-31160, CVE-2021-41184, CVE-2021-41183	27 Mar 202317:00	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jQuery UI used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-31160)	27 Mar 202320:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities identified in jQuery-UI affects IBM Engineering Lifecycle Optimization - Publishing	4 Oct 202308:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities	13 Feb 202313:10	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jQuery UI used by IBM Maximo Asset Management (CVE-2022-31160)	5 Jun 202315:51	–	ibm

Vulners

Node

jquery-ui-railsRange<8.0.0rubygems

jquery.ui.combinedRange<1.13.2nuget

org.webjars.npm jquery-uiRange<1.13.2maven

jquery jquery-uiRange<1.13.2npm

Source	Link
github	www.github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31160
github	www.github.com/jquery/jquery-ui/commit/8cc5bae1caa1fcf96bf5862c5646c787020ba3f9
drupal	www.drupal.org/sa-contrib-2022-052
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00015.html
blog	www.blog.jqueryui.com/2022/07/jquery-ui-1-13-2-released
github	www.github.com/jquery-ui-rails/jquery-ui-rails/blob/master/VERSIONS.md
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6XBR3G3JR5ZIOJDO4224M3INXDS2VFDD
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/J5LGNTICB5BRFAG3DHVVELS6H3CZSQMO
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QB2FJQXCNHO32VGVOC6DY6IPGVE4VDU6

21 Jul 2025 18:33Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.1

EPSS0.01895

SSVC

CWE-79