Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.webjars.npm:jquery-ui

maven

WebJar for jquery-ui

View on github.com · View on repo1.maven.org

Security Advisories for org.webjars.npm:jquery-ui in maven

Moderate
over 4 years ago

jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label GSA_kwCzR0hTQS1oNmdqLTZqanEtaDhnOc4AAtcw

rubygems, nuget, maven, npm jquery-ui-rails, jQuery.UI.Combined, org.webjars.npm:jquery-ui, jquery-ui
Moderate
about 5 years ago

XSS in `*Text` options of the Datepicker widget in jquery-ui GSA_kwCzR0hTQS1qN3F2LXBnZjYtaHZoNM0Wtw

rubygems, nuget, maven, npm jquery-ui-rails, jQuery.UI.Combined, org.webjars.npm:jquery-ui, jquery-ui
Moderate
about 5 years ago

XSS in the `of` option of the `.position()` util in jquery-ui GSA_kwCzR0hTQS1ncHFxLTk1MnEtNTMyN80Wtg

rubygems, nuget, maven, npm jquery-ui-rails, jQuery.UI.Combined, org.webjars.npm:jquery-ui, jquery-ui
Moderate
about 5 years ago

XSS in the `altField` option of the Datepicker widget in jquery-ui GSA_kwCzR0hTQS05Z2ozLWh3cDUtcG13Y80WtQ

rubygems, maven, nuget, npm jquery-ui-rails, org.webjars.npm:jquery-ui, jQuery.UI.Combined, jquery-ui
Potential
Moderate
about 5 years ago

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any strin... CPANSA-Yukki-2021-41182-jqueryui

cpan Yukki
Potential
Moderate
about 5 years ago

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The val... CPANSA-Yukki-2021-41183-jqueryui

cpan Yukki
Potential
Moderate
about 5 years ago

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string val... CPANSA-Yukki-2021-41184-jqueryui

cpan Yukki
Moderate
about 9 years ago

Cross-site Scripting in jquery-ui MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdjbTItOWM4OS13bWZt

rubygems, nuget, maven, npm jquery-ui-rails, jQuery.UI.Combined, org.webjars.npm:jquery-ui, jquery-ui
Moderate
about 9 years ago

jquery-ui Tooltip widget vulnerable to XSS MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFxeHAteHA5di12dng2

nuget, maven, rubygems, npm jQuery.UI.Combined, org.webjars.npm:jquery-ui, jquery-ui-rails, jquery-ui
Moderate
about 9 years ago

jQuery-UI vulnerable to Cross-site Scripting in dialog closeText MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhwY2YtOHZmOS1xNGdq

nuget, maven, rubygems, npm jQuery.UI.Combined, org.webjars.npm:jquery-ui, jquery-ui-rails, jquery-ui
Potential
almost 12 years ago

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option. CPANSA-Yukki-2010-5312-jqueryui

cpan Yukki

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 10