VULNERABILITY INTELLIGENCE
CVE-2010-5312
CVSS score6.1 MEDIUM
EPSS probability18.35%
CISA KEVNot currently listed
Published2014-11-24
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Mailing List, Third Party Advisory