Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Jqueryui Clear all filters
TI-2021-18023 CVE-2021-41184 · GHSA-gpqq-952q-5327

XSS in the `of` option of the `.position()` util

Priority MEDIUM 57

jQuery-UI is the official jQuery user interface library.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.40768 Published 2021-10-26 Partial fix · 1.13.0, 7.0.0 CWE-79
TI-2021-18022 CVE-2021-41183 · GHSA-j7qv-pgf6-hvh4

XSS in `*Text` options of the Datepicker widget

Priority MEDIUM 40

jQuery-UI is the official jQuery user interface library.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.08533 Published 2021-10-26 Partial fix · 1.13.0, 7.0.0 CWE-79
TI-2012-05379 CVE-2012-6662 · GHSA-qqxp-xp9v-vvx6

Cross-site scripting (XSS) vulnerability in the default content option in…

Priority LOW 30

Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07475 Published 2014-11-24 Partial fix · 1.10.0, 4.0.0 CWE-79