CVE-2010-5312: XSS
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
Other sources
jQuery UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the title parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2010-5312?
CVE-2010-5312 is a cross-site scripting (XSS) vulnerability in the Dialog widget in jQuery UI.
How does CVE-2010-5312 affect jQuery UI?
CVE-2010-5312 affects jQuery UI by allowing a remote attacker to execute script in a victim's web browser within the security context of the hosting website.
What is the severity of CVE-2010-5312?
The severity of CVE-2010-5312 is medium with a CVSS score of 6.1.
How can I fix CVE-2010-5312 in my Debian Linux system?
To fix CVE-2010-5312 in Debian Linux, update to version 7.0 or later of the Debian Linux package.
How can I fix CVE-2010-5312 in my jQuery UI installation?
To fix CVE-2010-5312 in jQuery UI, update to a version later than 1.10.0.