CVE-2026-124691

In Progress Kendo UI for jQuery Gantt , a Cross-Site Scripting (XSS) vulnerability exists in the task editor's Parent dropdown . The component renders task titles as HTML, allowing an attacker who can influence a task title to execute attacker-controlled markup as JavaScript when a user interacts...