CVE-2026-124690 | Progress Kendo UI for jQuery up to 2026.4.1109 Icon Sanitizer sanitizeSvgContent cross site scripting

A vulnerability, which was classified as problematic, has been found in Progress Kendo UI for jQuery up to 2026.4.1109. This affects the function sanitizeSvgContent of the component Icon Sanitizer. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-124690. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More