Description

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Remediation

References

CVE-2010-5312

Related Vulnerabilities

WordPress Plugin Cross-RSS Directory Traversal (1.7)

WordPress Plugin AVH Extended Categories Widgets SQL Injection (4.0.0)

WordPress Plugin Eyes Only:User Access Shortcode Cross-Site Scripting (1.8.2)

phpMyFAQ Improper Authorization Vulnerability (CVE-2014-6049)

Oracle Application Server CVE-2008-2583 Vulnerability (CVE-2008-2583)

Severity

Medium

Classification

CVE-2010-5312 CWE-707

Tags

Missing Update Known Vulnerabilities