Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:37 a.m.1 views

SUSE CVE-2021-41183

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...

6.5CVSS6.1AI score0.03097EPSS
Exploits1References4
OSV
OSV
added 2022/06/02 11:3 a.m.1 views

OESA-2022-1693 python-XStatic-jquery-ui security update

jquery-ui javascript library packaged for setuptools easyinstall / pip. This package is intended to be used by any project that needs these files. It intentionally does not provide any extra code except some metadata nor has any extra requirements. You MAY use some minimal support code from the...

6.5CVSS9AI score0.03097EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2022/05/26 4:25 p.m.2 views

jquery-ui: XSS in *Text options of the datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...

6.5CVSS6.7AI score0.03097EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2021/12/31 12:0 a.m.229 views

JQuery UI < 1.13.0 Multiple XSS

The version of JQuery UI library hosted on the remote web server is prior to 1.13.0. It is, therefore, affected by multiple cross-site scripting vulnerabilities: - Accepting the value of the 'altField' option of the Datepicker widget from untrusted sources may execute untrusted code. CVE-2021-411...

6.5CVSS6.6AI score0.31104EPSS
Exploits4References4
Tenable Nessus
Tenable Nessus
added 2021/11/04 12:0 a.m.655 views

jQuery UI < 1.13.0 Multiple Vulnerabilities

According to its self-reported version number, jQuery UI is prior to 1.13.0. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS in the altField option of the Datepicker widget CVE-2021-41182 - A Cross-Site Scripting XSS in Text options of the Datepicker widget...

6.5CVSS6.8AI score0.31104EPSS
Exploits4References6
OSV
OSV
added 2021/10/26 3:15 p.m.1 views

DEBIAN-CVE-2021-41183

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...

6.1CVSS6.1AI score0.03097EPSS
Exploits1References1
OSV
OSV
added 2021/10/26 3:15 p.m.0 views

UBUNTU-CVE-2021-41183

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...

6.5CVSS6.6AI score0.03097EPSS
Exploits1References7
Rows per page
Query Builder