Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Kendo UI for jQuery — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Kendo UI for jQuery, with AI-generated Chinese analysis, references, and POCs.

Vendor: Progress Software

CVE ID Title CVSS Severity Published
CVE-2026-108116 MDX and SOAP Injection in Kendo UI for jQuery CWE-74 7.5 High 2026-10-15
CVE-2026-106153 Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar CWE-79 5.4 Medium 2026-10-15
CVE-2026-106151 Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery CWE-80 5.4 Medium 2026-10-15
CVE-2026-106150 Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip CWE-79 5.4 Medium 2026-10-15
CVE-2026-106149 Cross-site Scripting (XSS) in Kendo UI for jQuery Menu CWE-80 5.4 Medium 2026-10-15
CVE-2026-106148 Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery CWE-80 5.4 Medium 2026-10-15
CVE-2026-106147 Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery CWE-80 5.4 Medium 2026-10-15
CVE-2026-106161 Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery CWE-80 5.4 Medium 2026-10-15
CVE-2026-106160 Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery CWE-1321 5.4 Medium 2026-10-15
CVE-2026-106159 Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106158 Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106157 Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106162 Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery CWE-80 4.7 Medium 2026-10-15
CVE-2026-106163 Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser CWE-80 6.5 Medium 2026-10-15
CVE-2025-6725 Cross-Site Scripting (XSS) in PdfViewer CWE-79 5.4 Medium 2025-07-02

All 15 known CVE vulnerabilities affecting Kendo UI for jQuery with full Chinese analysis, references, and POCs where available.