UpHeron
All vulnerabilities

RubyGems · Maven · npm · NuGet

CVE-2022-31160

jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label

Severity
Medium 6.1
Published
18 Jul 2022
Last changed
21 Jul 2025
Added to UpHeron
14 Oct 2026
Fixed in
1.13.2, 8.0.0
Also known as
GHSA-h6gj-6jjq-h8g9
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
org.webjars.npm:jquery-uiMaven · osv:Maven:org.webjars.npm:jquery-ui
  • Every version before 1.13.2
jQuery.UI.CombinedNuGet · osv:NuGet:jQuery.UI.Combined
  • Every version before 1.13.2
jquery-ui-railsRubyGems · osv:RubyGems:jquery-ui-rails
  • Every version before 8.0.0
jQuery UInpm · osv:npm:jquery-ui
  • Every version before 1.13.2

References