Поиск уязвимостей
Количество 7
Количество 7
CVE-2021-41183
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
CVE-2021-41183
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
CVE-2021-41183
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
CVE-2021-41183
jQuery-UI is the official jQuery user interface library. Prior to vers ...
GHSA-j7qv-pgf6-hvh4
XSS in `*Text` options of the Datepicker widget in jquery-ui
ALT-PU-2026-6727
ALT-PU-2026-6727: package `sympa` update to version 6.2.78-alt1
ALT-PU-2023-6282
ALT-PU-2023-6282: package `moodle` update to version 3.11.17-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-41183 jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources. | CVSS3: 6.1 | 9% Низкий | около 5 лет назад |
 | CVE-2021-41183 jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources. | CVSS3: 6.5 | 9% Низкий | около 5 лет назад |
 | CVE-2021-41183 jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources. | CVSS3: 6.1 | 9% Низкий | около 5 лет назад |
| CVE-2021-41183 jQuery-UI is the official jQuery user interface library. Prior to vers ... | CVSS3: 6.1 | 9% Низкий | около 5 лет назад |
| GHSA-j7qv-pgf6-hvh4 XSS in `*Text` options of the Datepicker widget in jquery-ui | CVSS3: 6.5 | 9% Низкий | около 5 лет назад |
| ALT-PU-2026-6727 ALT-PU-2026-6727: package `sympa` update to version 6.2.78-alt1 | CVSS3: 6.5 | 7 месяцев назад | |
| ALT-PU-2023-6282 ALT-PU-2023-6282: package `moodle` update to version 3.11.17-alt1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу