Sploitus

CVE-2021-41182

No indexed exploits for CVE-2021-41182 yet

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.

Affected products
Alt Linux, Astra Linux, Debian, Linuxmint, Ubuntu, Jquery Ui
Jqueryui Jquery Ui
< 1.13.0
Fix
Available
CVSS 3.1
6.5 MEDIUM
EPSS
39.4% (98th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2021-10-26
CVE-2021-41182 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2021-41182 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2021-41182 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.