Cpe:2.3:a:progress:kendo_ui_for_jquery:*:*:*:*:*:*:*:*

Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110 contain an XSS vulnerability in the PropertyGrid component due to insufficient encoding of bound property values.

Progress Kendo UI for jQuery contains a vulnerability in the Grid and TreeList components where column-reorder drag clues parse header text as HTML, potentially allowing JavaScript execution.

Progress Kendo UI for jQuery contains a vulnerability in the sanitizeSvgContent() function where parsing custom icon markup into a live DOM before filtering enables arbitrary JavaScript execution.