https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T15:30:12.565413+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-41183 CVE-2021-41183 — XSS in `*Text` options of the Datepicker widget 2026-10-12T15:30:12.566786+00:00

Affected: jquery-ui

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.