13 matches found
BIT-DRUPAL-2021-41183 XSS in `*Text` options of the Datepicker widget
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...
6.5CVSS6.5AI score0.08533EPSS
SaveExploits1References19
20