Known vulnerabilities in jQuery UI

Vendor: The jQuery Team
Software: jQuery UI
Software CPE: cpe:2.3:a:jquery:jquery-ui:*:*:*:*:*:*:*:*
Website: https://jquery.org/team/
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jQuery UI jQuery UI is affected by 9 known vulnerabilities: 3 medium, 6 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 1.13.2 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182		 CWE-79 Medium
No
No
 1.13.0 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 1.13.0 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183		 CWE-79 Medium
No
No
 1.13.0 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU7280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.10.0 13.02.2017 SB2012112701
#VU7282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.10.0 26.12.2016 SB2012112701
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103		 CWE-79 Low
No
No
 1.12.0 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more
#VU7278 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6662		 CWE-79 Low
No
No
 1.10.0 24.11.2014 SB2012112701
SB2015072206
SB2015030501
and 4 more
#VU3374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-5312		 CWE-79 Low
No
No
 1.10.0 30.11.-0001 SB2012112701
SB2015092606
SB2015072206
and 8 more