CVE-2010-5312

jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

Published Nov 24, 2014 CVSS 3.1 · 6.1 Medium EPSS 18.4% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-258-1 jqueryui security update
Debian DLA Debian DLA DLA-2889-1 drupal7 security update
Debian DSA Debian DSA DSA-3249-1 jqueryui security update
EUVD EUVD EUVD-2017-0323 Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Github GHSA Github GHSA GHSA-wcm2-9c89-wmfm Cross-site Scripting in jquery-ui
History
Type Values Removed Values Added
Metrics epss

{'score': 0.02665}

epss

{'score': 0.02055}