CVE-2012-6662 in UI
Summary
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
11/14/2014
Disclosure
11/24/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68213 | jQuery UI cross site scripting | 79 | High | Official fix | CVE-2012-6662 |