CVE-2012-6662
- State
- Published
- Severity
- Not scored
- Published
- Nov 24, 2014
- Updated
- Aug 6, 2024
- Reserved
- Nov 14, 2014
Description
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/jquery/jquery/issues/2432
- RHSA-2015:0442vendor-advisory
- http://bugs.jqueryui.com/ticket/8861
- jqueryui-cve20126662-xss(98697)vdb-entry
- [oss-security] 20141114 Re: old CVE assignments for JQuery 1.10.0mailing-list
- https://github.com/jquery/jquery-ui/commit/f2854408cce7e4b7fc6bf8676761904af9c96bde
- RHSA-2015:1462vendor-advisory
- http://bugs.jqueryui.com/ticket/8859
- 71107vdb-entry
- [oss-security] 20141114 old CVE assignments for JQuery 1.10.0mailing-list
- https://github.com/jquery/jquery-ui/commit/5fee6fd5000072ff32f2d65b6451f39af9e0e39e
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.