VULNERABILITY INTELLIGENCE
CVE-2012-6662
CVSS score4.3 MEDIUM
EPSS probability7.47%
CISA KEVNot currently listed
Published2014-11-24
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Primary references
- cve@mitre.org — Issue Tracking, Vendor Advisory
- cve@mitre.org — Issue Tracking, Vendor Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory