Description

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Remediation

References

CVE-2016-7103

Related Vulnerabilities

MySQL CVE-2013-0389 Vulnerability (CVE-2013-0389)

ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-2397)

PHP Uncontrolled Resource Consumption Vulnerability (CVE-2017-9119)

WordPress Plugin Publish to Schedule Cross-Site Scripting (4.5.4)

Oracle Database Server CVE-2020-2735 Vulnerability (CVE-2020-2735)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-7103