Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:48:03 +0000 CVE-2016-7103 https://cve.radiocsirt.org/vuln/cve-2016-7103 <p>Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.</p> <p>Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.</p> https://cve.radiocsirt.org/vuln/cve-2016-7103 GHSA-hpcf-8vf9-q4gj — jQuery-UI vulnerable to Cross-site Scripting in dialog closeText https://cve.radiocsirt.org/vuln/ghsa-hpcf-8vf9-q4gj <p><strong>Affected:</strong> npm: jquery-ui, RubyGems: jquery-ui-rails, Maven: org.webjars.npm:jquery-ui, NuGet: jQuery.UI.Combined</p> <p>Affected versions of `jquery-ui` are vulnerable to a cross-site scripting vulnerability when arbitrary user input is supplied as the value of the `closeText` parameter in the `dialog` function.</p> <p>jQuery-UI is a library for manipulating UI elements via jQuery.</p> <p>Version 1.11.4 has a cross site scripting (XSS) vulnerability in the `closeText` parameter of the `dialog` function. If your application passes user input to this parameter, it may be vulnerable to XSS via this attack vector.</p> <p>## Recommendation</p> <p>Upgrade to jQuery-UI 1.12.0 or later.</p> <p><strong>Affected:</strong> npm: jquery-ui, RubyGems: jquery-ui-rails, Maven: org.webjars.npm:jquery-ui, NuGet: jQuery.UI.Combined</p> <p>Affected versions of `jquery-ui` are vulnerable to a cross-site scripting vulnerability when arbitrary user input is supplied as the value of the `closeText` parameter in the `dialog` function.</p> <p>jQuery-UI is a library for manipulating UI elements via jQuery.</p> <p>Version 1.11.4 has a cross site scripting (XSS) vulnerability in the `closeText` parameter of the `dialog` function. If your application passes user input to this parameter, it may be vulnerable to XSS via this attack vector.</p> <p>## Recommendation</p> <p>Upgrade to jQuery-UI 1.12.0 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-hpcf-8vf9-q4gj