Description

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Remediation

References

CVE-2016-7103

Related Vulnerabilities

Jenkins Improper Input Validation Vulnerability (CVE-2016-0789)

WordPress Plugin AnyMind Widget Cross-Site Request Forgery (1.1)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1836)

WordPress Plugin Add Product Tabs for WooCommerce Security Bypass (1.4.2)

WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Security Bypass (2.9.4)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-7103