CVE-2026-124687 | Progress Kendo UI for jQuery up to 2026.4.1110 DropDownButton/SplitButton id/target cross site scripting

November 11, 2026 Yanac

A vulnerability was found in Progress Kendo UI for jQuery up to 2026.4.1110. It has been declared as problematic. Affected by this issue is some unknown functionality of the component DropDownButton/SplitButton. Such manipulation of the argument id/target leads to cross site scripting.

This vulnerability is traded as CVE-2026-124687. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More