THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-41183 (MEDIUM 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text

[NVD] CVE-2021-41183 (MEDIUM 6.5) — jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `Text

lownvdPublished 2021-10-26

CVE-2021-41183 CVSS: 6.5 MEDIUM Published: 2021-10-26T15:15:10.387

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not H

Indicators of compromise

CVE-2021-41183cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-41183