Lucene search
+L

17 matches found

OSV
OSV
•added 2024/03/06 10:54 a.m.•39 views

BIT-DRUPAL-2021-41182 XSS in the `altField` option of the Datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now...

6.5CVSS6.5AI score0.39361EPSS
SaveExploits1References17
Rows per page
Query Builder