Skip to content
OpenAdvisories
Medium · 4.8 CVE-2024-13292 DRUPAL-CONTRIB-2024-058EUVD-2024-51505GHSA-ch9r-7w7v-gg4p

Tooltip - Moderately critical - Cross site scripting - SA-CONTRIB-2024-058

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tooltip allows Cross-Site Scripting (XSS).This issue affects Tooltip: from 0.0.0 before 1.1.2.

Affected products

VendorProductAffectedFixed
Drupal Tooltip 0.0.0 – < 1.1.2 1.1.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/tooltip < 1.1.2 1.1.2 DRUPAL-CONTRIB-2024-058

References