Kendo UI for jQuery vulnerabilities
13 known vulnerabilities in Kendo UI for jQuery from Progress Software. 13 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery, the Chart default tooltip renders point values as raw HTML. An attacker who can influence a string point value can inject markup that executes as JavaScript when a user hovers over the point. Successful exploitation may comprom
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery, Chart shared-tooltip rendering treats bound category and series-name values as raw HTML. An attacker who can influence values consumed by an affected Chart can inject markup that executes as JavaScript when a user displays the
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery, Spreadsheet sheet names are inserted into the SheetsBar menu button's data-sheet-name attribute without encoding. An attacker who can influence a sheet name can inject an event-handler attribute and execute JavaScript when a us
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery Form, the items[].hint option is documented as a string but is rendered as HTML. An attacker who can influence a Form item's hint can cause attacker-controlled markup to execute as JavaScript when a user views the rendered form.
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery Gantt, the task editor's Parent dropdown renders task titles as HTML. An attacker who can influence a task title shown in the dropdown can cause attacker-controlled markup to execute as JavaScript when a user opens or interacts
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PropertyGrid does not encode bound property values and items[].description in its default configuration. An attacker who can influence either value can cause JavaScript
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PivotGrid and PivotConfigurator axis field names are passed to a chip template without appropriate encoding. An attacker who can influence an axis field name can cause
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reorder drag clue reparses header text as HTML. An attacker who can influence a column field or title used by an affected application can c
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery, sanitizeSvgContent() parses custom icon markup into a live DOM before filtering it. An attacker who can influence custom icon content can cause JavaScript to execute during icon creation, before an unsafe element is removed. Th
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Input During Web Page Generation
In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title, subtitle, and header button label values before rendering them. An attacker who can influence these values can inject markup that exe
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Script-Related HTML Tags in a Web Page
In Progress® Kendo® UI for jQuery prior to 2026.4.1111 the TabStrip, PanelBar, and Menu widgets support mapping a dataSource field to `spriteCssClass`. If an attacker can control the mapped data, they can break out of the attribute and inject markup, including
- 7.1 High severity
Kendo UI for jQuery: Improper Neutralization of Script-Related HTML Tags in a Web Page
In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow markup injection through the `id` and `target` attributes. An attacker who can influence these item values can break out of the attributes
- 7.5 High severity
Kendo UI for jQuery: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup into SOAP requests, potentially exposing data accessible through the configured XMLA connecti