CVE-2010-5312 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.