{"vulnerability": "CVE-2021-41182", "sightings": [{"uuid": "c4f2a618-8605-4d56-a119-cf91630144e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "MISP/31676e06-066b-46a9-a1c0-2da31391565a", "content": "", "creation_timestamp": "2023-04-11T05:15:22.000000Z"}, {"uuid": "6f72b643-8a6f-448d-bcbc-0ce99e4284b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://bsky.app/profile/MichaelAltfield.mastodon.social.ap.brid.gy/post/3mecdvknanm72", "content": "", "creation_timestamp": "2026-02-07T21:19:50.843505Z"}, {"uuid": "f0b91359-e544-4a71-843b-01334f5b07d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://t.me/ctinow/182502", "content": "https://ift.tt/84vbMek\nCVE-2021-41182 | Oracle Retail Customer Management and Segmentation Foundation Internal Operations cross site scripting", "creation_timestamp": "2024-02-10T09:41:22.000000Z"}, {"uuid": "562c7b73-b772-402b-a9c8-663c70f8f721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://t.me/cibsecurity/31231", "content": "\u203c CVE-2021-41182 \u203c\n\njQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-26T18:15:19.000000Z"}, {"uuid": "e515e405-9531-4e24-9b65-e288b278cac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://t.me/Albonyan_1/507", "content": "Vulnerabilities found for jquery ui 1.10.3\n\n\nClassification\n  EPSS score: 0.22087\n  EPSS percentile: 0.95597\n  CISA KEV: False\n  CVE: CVE-2021-41184, CVE-2021-41183, CVE-2021-41182, CVE-2022-31160, CVE-2016-7103\n  CVSS V3: 6.5\n  CWE: CWE-1035\n\n\nVulnerabilities found for jquery 1.9.1\n\n\nClassification\n  EPSS score: 0.32295\n  EPSS percentile: 0.96675\n  CISA KEV: False\n  CVE: CVE-2020-11023, CVE-2020-11022, CVE-2019-11358, CVE-2015-9251\n  CVSS V3: 6.9\n  CWE: CWE-1035", "creation_timestamp": "2026-08-21T05:00:03.774308Z"}, {"uuid": "475e3c54-6f29-4424-89f9-6ea8c8bbf6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://t.me/Albonyan_1/507", "content": "Vulnerabilities found for jquery ui 1.10.3\n\n\nClassification\n  EPSS score: 0.22087\n  EPSS percentile: 0.95597\n  CISA KEV: False\n  CVE: CVE-2021-41184, CVE-2021-41183, CVE-2021-41182, CVE-2022-31160, CVE-2016-7103\n  CVSS V3: 6.5\n  CWE: CWE-1035\n\n\nVulnerabilities found for jquery 1.9.1\n\n\nClassification\n  EPSS score: 0.32295\n  EPSS percentile: 0.96675\n  CISA KEV: False\n  CVE: CVE-2020-11023, CVE-2020-11022, CVE-2019-11358, CVE-2015-9251\n  CVSS V3: 6.9\n  CWE: CWE-1035", "creation_timestamp": "2026-08-22T00:00:29.158644Z"}, {"uuid": "3b57798e-aa7b-4940-be39-247b1919e43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://t.me/thehaking/2989", "content": "Bug Bounty \u0448\u043f\u0430\u0440\u0433\u0430\u043b\u043a\u0430\n\njQuery UI XSS Payloads (Part 1)\n\n\ud83d\udd39CVE-2022-31160\n\ud83d\udd39CVE-2021-41183\n\ud83d\udd39CVE-2021-41182\n\n\ud83d\udc49@thehaking", "creation_timestamp": "2026-08-28T00:01:00.402822Z"}, {"uuid": "c8415626-8047-47ed-87f5-61101579e982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-41182", "type": "seen", "source": "https://t.me/thehaking/2989", "content": "Bug Bounty \u0448\u043f\u0430\u0440\u0433\u0430\u043b\u043a\u0430\n\njQuery UI XSS Payloads (Part 1)\n\n\ud83d\udd39CVE-2022-31160\n\ud83d\udd39CVE-2021-41183\n\ud83d\udd39CVE-2021-41182\n\n\ud83d\udc49@thehaking", "creation_timestamp": "2026-08-27T09:00:03.176851Z"}]}