{"id":"CVE-2026-106157","revision":"f9b7fdfc3db14ba2bc5c0b99f8962c9f","records":[{"revision":"f9b7fdfc3db14ba2bc5c0b99f8962c9f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-106157","aliases":[],"title":"Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery","description":"In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar component inserts data source item URL values into a single-quoted href attribute without proper encoding. An attacker who can control an item URL can inject additional HTML attributes, including event handlers, and execute JavaScript in a user's browser when the affected item is interacted with. Successful exploitation can compromise the confidentiality and integrity of data accessible to the affected application. This issue is fixed in version 2026.3.1015.","state":0,"publishedAt":"2026-10-15T13:21:27.532+00:00","modifiedAt":"2026-10-15T18:29:35.947+00:00","affected":[{"ecosystem":"Vendor product","name":"Kendo UI for jQuery","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Progress Software\",\n                    \"product\": \"Kendo UI for jQuery\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2019.2.514\",\n                            \"lessThan\": \"2026.3.1015\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","score":4.7,"severity":"MEDIUM"}],"references":["https://www.telerik.com/kendo-jquery-ui/documentation/knowledge-base/kb-security-panelbar-url-xss-cve-2026-106157"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106157","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-106157","identifiers":["CVE-2026-106157"]},"retained":false,"historicalAffected":[]}],"coverage":[]}