tocsin

Debian/jqueryui: medium 6.1

Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Action: Upgrade jqueryui to 1.10.1+dfsg-1 or later.

Affected

introducedfixedlast affected
01.10.1+dfsg-1-

Fixed versions

1.10.1+dfsg-1

Sources

published · modified · JSON