Description

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Remediation

References

CVE-2016-7103

Related Vulnerabilities

WordPress Plugin Ad Blocker Notify Lite Cross-Site Scripting (2.4.0)

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5084)

WordPress Plugin VaultPress Cross-Site Scripting (1.7.7)

WordPress Plugin Contact Form by WPForms-Drag & Drop Form Builder for WordPress Cross-Site Scripting (1.5.8.2)

phpBB Improper Input Validation Vulnerability (CVE-2019-9826)

Severity

Medium

Classification

CVE-2016-7103 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities