JQuery Tooltip suffers from a cross site scripting vulnerability.
088a62925514da2dffb93c28a026cbae071b0c06e7a4b5e8e1b290742bd24e07/*
Author: Claudio Contin
XSS bug on http://www.jquerytools.org/ tooltip component
*/
Tooltip component doesn't sanitize html passed to the 'title' element, even though the html is already sanitized before been passed to tooltip class.
Cross site scripting is possible if user has control of the input passed to tooltip.
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed