Description

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Remediation

References

CVE-2016-7103

Related Vulnerabilities

Django Uncontrolled Resource Consumption Vulnerability (CVE-2019-14233)

WordPress Plugin WP Google Maps Multiple Cross-Site Scripting Vulnerabilities (8.1.12)

WordPress Plugin Calendar Unspecified Vulnerability (1.3.10)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.5.7)

WordPress Plugin Google Analytics Dashboard Plugin for WordPress by MonsterInsights Multiple Vulnerabilities (5.3.2)

Severity

Medium

Classification

CVE-2016-7103 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities