CVE-2026-106162

The Kendo UI for jQuery component, specifically the FileManager component, is vulnerable to Cross-Site Scripting (XSS) in versions 2023.3.1010 through 2026.3.1015 . The root cause is that the component renders remotely supplied item names as HTML within its default drag hint , even though list it...