Skip to content
Threat Feed
Subscribe

Product

Kendo UI for JQuery (< 2026.4.1110)

2 briefs RSS
high advisory

Progress Kendo UI for jQuery: PropertyGrid Cross-Site Scripting (CVE-2026-124694)

Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110 contain an XSS vulnerability in the PropertyGrid component due to insufficient encoding of bound property values.

Kendo UI for jQuery
1c
high advisory

Progress Kendo UI for jQuery: sanitizeSvgContent() cross-site scripting (CVE-2026-124690)

Progress Kendo UI for jQuery contains a vulnerability in the sanitizeSvgContent() function where parsing custom icon markup into a live DOM before filtering enables arbitrary JavaScript execution.

Kendo UI for jQuery
1c