UBUNTU-CVE-2012-6662

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2012-6662
Published: 24 Nov 2014, 16:59
Last modified:16 Jul 2025, 07:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Nov 2014, 16:59
Published
Vulnerability first disclosed
16 Jul 2025, 07:31
Last Modified
Vulnerability information updated

Description

Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo.

Affected Systems

  • ubuntu•jqueryui

    < 1.10.1+dfsg-1

References (2)