EUVD-2026-124547

In Progress Kendo UI for jQuery Form, the items.hint option is documented as a string but is rendered as HTML. An attacker who can influence a Form item's hint can cause attacker-controlled markup to execute as JavaScript when a user views the rendered form. Successful exploitation may compromise...