XSS in `*Text` options of the Datepicker widget in jquery-ui

🗓️ 26 Oct 2021 14:55:21Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 293 Views

XSS vulnerability in Datepicker widget *Text option

Reporter	Title	Published	Views	Family All 162
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance	11 Jan 202416:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in jQuery affect IBM Tivoli Netcool Impact	1 Dec 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2021-41182, CVE-2022-31160, CVE-2021-41184, CVE-2021-41183	27 Mar 202317:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities identified in jQuery-UI affects IBM Engineering Lifecycle Optimization - Publishing	4 Oct 202308:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator was vulnerable to cross-site scripting due to multiple JQuery vulnerabilities (CVE-2021-41184, CVE-2021-41183, CVE-2021-41182)	2 Feb 202320:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager virtual appliance component	10 Jan 202404:21	–	ibm

Vulners

Node

jquery-ui-railsRange<7.0.0rubygems

jquery.ui.combinedRange<1.13.0nuget

org.webjars.npm jquery-uiRange<1.13.0maven

jquery jquery-uiRange<1.13.0npm

Source	Link
github	www.github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41183
github	www.github.com/jquery/jquery-ui/pull/1953
blog	www.blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/
bugs	www.bugs.jqueryui.com/ticket/15284
security	www.security.netapp.com/advisory/ntap-20211118-0004/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NXIUUBRVLA4E7G7MMIKCEN75YN7UFERW/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/O74SXYY7RGXREQDQUDQD4BPJ4QQTD2XQ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SNXA7XRKGINWSUIPIZ6ZBCTV6N3KSHES/
lists	www.lists.debian.org/debian-lts-announce/2022/01/msg00014.html

26 Sep 2023 18:11Current

0.7Low risk

Vulners AI Score0.7

CVSS 24.3

CVSS 3.16.1 - 6.5

EPSS0.07948

CWE-79