THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-41182 (MEDIUM 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altFi

[NVD] CVE-2021-41182 (MEDIUM 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altFi

lownvdPublished 2021-10-26

CVE-2021-41182 CVSS: 6.5 MEDIUM Published: 2021-10-26T15:15:10.313

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A work

Indicators of compromise

CVE-2021-41182cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-41182