Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libjs-jquery-datatables", "binary_version": "1.10.9+dfsg-1" } ] }