Description
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-258-1 | jqueryui security update |
Debian DLA |
DLA-2889-1 | drupal7 security update |
Debian DSA |
DSA-3249-1 | jqueryui security update |
EUVD |
EUVD-2017-0323 | Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option. |
Github GHSA |
GHSA-wcm2-9c89-wmfm | Cross-site Scripting in jquery-ui |
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T04:17:10.323Z
Reserved: 2014-11-14T00:00:00.000Z
Link: CVE-2010-5312
No data.
Status : Deferred
Published: 2014-11-24T16:59:00.087
Modified: 2025-04-12T10:46:40.837
Link: CVE-2010-5312
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD
Github GHSA