● CVE — Medium
CVE-2021-41183
Vendordebian, fedoraproject, netapp, oracle, drupalProductdebian linux, fedora, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h700e firmware, h700s firmware, peoplesoft enterprise peopletools, agile product lifecycle management, jd edwards enterpriseone tools, application express, banking platform, communications interactive session recorder, drupal, primavera gateway, hospitality suite8, agile plm, mysql enterprise monitor, communications operations monitor, policy automation, big data spatial and graph, hospitality inventory management, jquery uiDiscoveredOct 26, 2021UpdatedAug 25, 2026
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various *Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various *Text options are now always treated as pure text, not HTML. A workaround is to not accept the value of the *Text options from untrusted sources.