CVE-2022-31160 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-31160 Interim 1 3 2026-03-05T04:41:50Z current 2025-08-06T02:42:51Z 2026-03-05T04:41:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-31160 jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 pgadmin4 pgadmin4-cloud pgadmin4-desktop pgadmin4-doc pgadmin4-web pgadmin4-web-uwsgi system-user-pgadmin pgadmin4 as a component of SLES-LTSS-TERADATA 15 SP2 pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS pgadmin4 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-web as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 system-user-pgadmin as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-web as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 system-user-pgadmin as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP5-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP5-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP6-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP6-LTSS system-user-pgadmin as a component of SUSE Linux Enterprise Server 15 SP6-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 system-user-pgadmin as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 pgadmin4 as a component of SUSE Manager Proxy 4.3 pgadmin4-doc as a component of SUSE Manager Proxy 4.3 pgadmin4-web as a component of SUSE Manager Proxy 4.3 pgadmin4 as a component of SUSE Manager Proxy LTS 4.3 pgadmin4-doc as a component of SUSE Manager Proxy LTS 4.3 pgadmin4-web as a component of SUSE Manager Proxy LTS 4.3 pgadmin4 as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-doc as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-web as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4 as a component of SUSE Manager Retail Branch Server LTS 4.3 pgadmin4-doc as a component of SUSE Manager Retail Branch Server LTS 4.3 pgadmin4-web as a component of SUSE Manager Retail Branch Server LTS 4.3 pgadmin4 as a component of SUSE Manager Server 4.3 pgadmin4-doc as a component of SUSE Manager Server 4.3 pgadmin4-web as a component of SUSE Manager Server 4.3 pgadmin4 as a component of SUSE Manager Server LTS 4.3 pgadmin4-doc as a component of SUSE Manager Server LTS 4.3 pgadmin4-web as a component of SUSE Manager Server LTS 4.3 pgadmin4 as a component of openSUSE Leap 15.6 pgadmin4-cloud as a component of openSUSE Leap 15.6 pgadmin4-desktop as a component of openSUSE Leap 15.6 pgadmin4-doc as a component of openSUSE Leap 15.6 pgadmin4-web-uwsgi as a component of openSUSE Leap 15.6 system-user-pgadmin as a component of openSUSE Leap 15.6 jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`. CVE-2022-31160 openSUSE Leap 15.6:pgadmin4 openSUSE Leap 15.6:pgadmin4-cloud openSUSE Leap 15.6:pgadmin4-desktop openSUSE Leap 15.6:pgadmin4-doc openSUSE Leap 15.6:pgadmin4-web-uwsgi openSUSE Leap 15.6:system-user-pgadmin moderate 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N