Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-258-1 | jqueryui security update |
Debian DLA |
DLA-2889-1 | drupal7 security update |
Debian DSA |
DSA-3249-1 | jqueryui security update |
EUVD |
EUVD-2017-0323 | Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option. |
Github GHSA |
GHSA-wcm2-9c89-wmfm | Cross-site Scripting in jquery-ui |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T04:17:10.323Z
Reserved: 2014-11-14T00:00:00
Link: CVE-2010-5312
No data.
Status : Deferred
Published: 2014-11-24T16:59:00.087
Modified: 2025-04-12T10:46:40.837
Link: CVE-2010-5312
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Github GHSA