CVE-2012-6662 in UI
Zusammenfassung (Englisch)
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
14.11.2014
Veröffentlichung
24.11.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 68213 | jQuery UI Cross Site Scripting | 79 | High | Offizieller Fix | CVE-2012-6662 |