According to its self-reported version number, jQuery UI is prior to 1.13.0. It is, therefore, affected by multiple vulnerabilities:
A Cross-Site Scripting (XSS) in the altField option of the Datepicker widget (CVE-2021-41182)
A Cross-Site Scripting (XSS) in *Text options of the Datepicker widget (CVE-2021-41183)
A Cross-Site Scripting (XSS) in the of option of the .position() util (CVE-2021-41184)
Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.
No source data
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41182
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41183
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41184
github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc
github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327
github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4