In the PdfViewer component, a Cross-Site Scripting (XSS) vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Kendo UI for jQuery
Vendor
Progress Software
Product
Kendo UI for jQuery
Platforms
Unknown
Default status
unaffected
Kendo UI for jQuery · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2024.4.1112
affected
custom
Unavailable
2025.2.520
None listed
Kendo UI for Angular
Vendor
Progress Software
Product
Kendo UI for Angular
Platforms
Unknown
Default status
unaffected
Kendo UI for Angular · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
18.5.0
affected
semver
Unavailable
19.1.2
None listed
KendoReact
Vendor
Progress Software
Product
KendoReact
Platforms
Unknown
Default status
unaffected
KendoReact · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.10.0
affected
semver
Unavailable
11.1.0
None listed
Telerik UI for ASP.NET MVC
Vendor
Progress Software
Product
Telerik UI for ASP.NET MVC
Platforms
Unknown
Default status
unaffected
Telerik UI for ASP.NET MVC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2024.4.1112
affected
custom
Unavailable
2025.2.520
None listed
Telerik UI for ASP.NET Core
Vendor
Progress Software
Product
Telerik UI for ASP.NET Core
Platforms
Unknown
Default status
unaffected
Telerik UI for ASP.NET Core · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2024.4.1112
affected
custom
Unavailable
2025.2.520
None listed
Telerik UI for Blazor
Vendor
Progress Software
Product
Telerik UI for Blazor
Platforms
Unknown
Default status
unaffected
Telerik UI for Blazor · Scoped product and version facts