jQuery-ui-dialog – XSS Vulnerability Under 1.10.0, Title Attribute

< 1 min read

Impact Area

Security

 

 

 

Severity

High

 

 

 

Affected Element

ServiceNow

UI Script

Salesforce

Static Resource

Rule number #

SN-JSL-015 (for ServiceNow)

SF-JSL-015 (for Salesforce)

Impact #

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Remediation #

Update jQuery to the latest version.

Time to fix #

30 min

Updated on March 21, 2025
Was it helpful ?