Threats tagged 'ghsa-vp66-qvrh-pgw5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-124687In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton High7.12026-11-11GCVE DatabaseCVE-2026-124687 Kendo UI for jQuery versions from 2022.2.621 up to but not including 2026.4.1111 contain a vulnerability in the DropDownButton and SplitButton components. This vulnerability allows markup injection via the 'id' and 'target' attributes, enabling an attacker who can control these values to inject arbitrary markup including event handlers. The issue is fixed in version 2026.4.1111. Report on CVE-2026-124687 Vulnerability CWE-80 #ghsa-vp66-qvrh-pgw5	GCVE Database	2026-11-11

Page 1 of 1