# Progress Software Kendo UI for jQuery.

Every CVE that names Progress Software Kendo UI for jQuery among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [MDX and SOAP Injection in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-108116.md)
  `CVE-2026-108116` · CVE record: Progress Software Kendo UI for jQuery · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Other injection
- [Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar](https://agentprime.io/advisories/CVE-2026-106153.md)
  `CVE-2026-106153` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106151.md)
  `CVE-2026-106151` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip](https://agentprime.io/advisories/CVE-2026-106150.md)
  `CVE-2026-106150` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site Scripting (XSS) in Kendo UI for jQuery Menu](https://agentprime.io/advisories/CVE-2026-106149.md)
  `CVE-2026-106149` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106148.md)
  `CVE-2026-106148` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106147.md)
  `CVE-2026-106147` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106161.md)
  `CVE-2026-106161` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106160.md)
  `CVE-2026-106160` · CVE record: Progress Software Kendo UI for jQuery · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Prototype pollution
- [Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106159.md)
  `CVE-2026-106159` · CVE record: Progress Software Kendo UI for jQuery · CVSS 4.7 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106158.md)
  `CVE-2026-106158` · CVE record: Progress Software Kendo UI for jQuery · CVSS 4.7 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106157.md)
  `CVE-2026-106157` · CVE record: Progress Software Kendo UI for jQuery · CVSS 4.7 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery](https://agentprime.io/advisories/CVE-2026-106162.md)
  `CVE-2026-106162` · CVE record: Progress Software Kendo UI for jQuery · CVSS 4.7 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser](https://agentprime.io/advisories/CVE-2026-106163.md)
  `CVE-2026-106163` · CVE record: Progress Software Kendo UI for jQuery · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Cross-Site Scripting (XSS) in PdfViewer](https://agentprime.io/advisories/CVE-2025-6725.md)
  `CVE-2025-6725` · CVE record: Progress Software Kendo UI for jQuery and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jul 2025 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=progress-software-kendo-ui-for-jquery>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/progress-software-kendo-ui-for-jquery/>. Everything for agents: <https://agentprime.io/llms.txt>.