jqueryui vulnerabilities

Products

• jquery ui 4

Latest jqueryui CVEs

Newest publication first

1. CVE-2022-31160 jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label

   Published 2022-07-20

   Medium·CVSS 6.1 PoC

   jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent l...

2. CVE-2016-7103 jQuery-UI vulnerable to Cross-site Scripting in dialog closeText

   Published 2017-03-15

   Medium·CVSS 6.1 PoC

   Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

3. CVE-2010-5312 Cross-site Scripting in jquery-ui

   Published 2014-11-24

   Medium·CVSS 6.1 PoC

   Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

4. CVE-2012-6662 jquery-ui Tooltip widget vulnerable to XSS

   Published 2014-11-24

   Medium·CVSS 4.3

   Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplet...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.