Lucene search
K

JQuery Tooltip Cross Site Scripting

🗓️ 28 Aug 2012 00:00:00Reported by Claudio ContinType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 15 Views

JQuery Tooltip Cross Site Scripting vulnerability on http://www.jquerytools.org

Code
`/*  
Author: Claudio Contin  
XSS bug on http://www.jquerytools.org/ tooltip component  
*/  
  
Tooltip component doesn't sanitize html passed to the 'title' element, even though the html is already sanitized before been passed to tooltip class.  
Cross site scripting is possible if user has control of the input passed to tooltip.  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation