CVE-2010-5312

Description

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

References

http://rhn.redhat.com/errata/RHSA-2015-0442.html

http://rhn.redhat.com/errata/RHSA-2015-1462.html

http://seclists.org/oss-sec/2014/q4/613

http://seclists.org/oss-sec/2014/q4/616

https://exchange.xforce.ibmcloud.com/vulnerabilities/98696

https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3

https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/

https://security.netapp.com/advisory/ntap-20190416-0007/

https://www.drupal.org/sa-core-2022-002

http://www.debian.org/security/2015/dsa-3249

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

http://www.securitytracker.com/id/1037035

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3