Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DLA-258-1 | jqueryui security update |
![]() |
DLA-2889-1 | drupal7 security update |
![]() |
DSA-3249-1 | jqueryui security update |
![]() |
EUVD-2017-0323 | Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option. |
![]() |
GHSA-wcm2-9c89-wmfm | Cross-site Scripting in jquery-ui |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sun, 13 Jul 2025 13:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
epss
|
epss
|

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T04:17:10.323Z
Reserved: 2014-11-14T00:00:00
Link: CVE-2010-5312

No data.

Status : Deferred
Published: 2014-11-24T16:59:00.087
Modified: 2025-04-12T10:46:40.837
Link: CVE-2010-5312


No data.