CVE-2024-13292

The Drupal Tooltip module (versions 0.0.0 through 1.1.2 ) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Specifically, the module fails to sufficiently escape markup inserted into the tooltip block. An attacker can exploit this to c...