EUVD-2022-3815

Malicious code in bioql PyPI...

CVE-2019-15484

Bolt before 3.6.10 has XSS via an image's alt or title field...

SUSE CVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

jquery-ui: XSS in the altField option of the datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

UBUNTU-CVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

CVE-2019-15484

Bolt before 3.6.10 has XSS via an image's alt or title field...

PT-2019-14213

Name of the Vulnerable Software and Affected Versions Bolt versions prior to 3.6.10 Description The issue allows for XSS attacks through an image's alt or title field. Recommendations For versions prior to 3.6.10, update to version 3.6.10 or later to resolve the issue...

CVE-2019-15484: Improper Neutralization of Input During Web Page Generation

Bolt before 3.6.10 has XSS via an image's alt or title field...