Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-drupal7 | Aug 22, 2024 | Mar 15, 2017 | |
| Debian | debian-upgrade-jqueryui | Jan 21, 2022 | Mar 15, 2017 | |
| Drupal | drupal-upgrade-7_86 | Mar 23, 2022 | Mar 15, 2017 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 18, 2026 | Jun 18, 2026 | |
| Oracle Weblogic | oracle-weblogic-jul-2019-cpu-10_3_6_0_0oracle-weblogic-jul-2019-cpu-12_1_3_0_0oracle-weblogic-jul-2019-cpu-12_2_1_3_0 | Aug 1, 2019 | Mar 15, 2017 | |
| Ubuntu | ubuntu-pro-upgrade-libjs-jquery-uiubuntu-pro-upgrade-node-jquery-uiubuntu-upgrade-libjs-jquery-uiubuntu-upgrade-node-jquery-ui | Oct 6, 2023 | Mar 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub