https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:49:03.063991+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-7103 CVE-2016-7103 2026-10-02T12:49:03.065880+00:00

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

 https://cve.radiocsirt.org/vuln/ghsa-hpcf-8vf9-q4gj GHSA-hpcf-8vf9-q4gj — jQuery-UI vulnerable to Cross-site Scripting in dialog closeText 2026-10-02T12:49:03.065935+00:00

Affected: npm: jquery-ui, RubyGems: jquery-ui-rails, Maven: org.webjars.npm:jquery-ui, NuGet: jQuery.UI.Combined

Affected versions of `jquery-ui` are vulnerable to a cross-site scripting vulnerability when arbitrary user input is supplied as the value of the `closeText` parameter in the `dialog` function.

jQuery-UI is a library for manipulating UI elements via jQuery.

Version 1.11.4 has a cross site scripting (XSS) vulnerability in the `closeText` parameter of the `dialog` function. If your application passes user input to this parameter, it may be vulnerable to XSS via this attack vector.

## Recommendation

Upgrade to jQuery-UI 1.12.0 or later.