CVE-2020-10544

PrimeFaces 7.0.11 (PrimeTek) has an XSS vulnerability in tooltip.js where user-supplied data used as a tooltip title can inject JavaScript due to lack of input validation. Affected component: tooltip functionality in PrimeFaces web applications. Root cause: input data used for tooltip titles is n...