Description

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Remediation

References

CVE-2010-5312

Related Vulnerabilities

MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41362)

Oracle JRE CVE-2023-22044 Vulnerability (CVE-2023-22044)

MediaWiki Improper Input Validation Vulnerability (CVE-2010-1189)

WordPress Plugin Stylish Price List Security Bypass (6.9.0)

WordPress Plugin Border Loading Bar Multiple Cross-Site Scripting Vulnerabilities (1.0)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-5312