CVE-2024-13292

4.8

MEDIUMCVSS v3

Published

January 9, 2025

Affected

12 projects

Assigned by

[email protected]

Severity scale

010

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tooltip allows Cross-Site Scripting (XSS).This issue affects Tooltip: from 0.0.0 before 1.1.2.

@codemirror/tooltip

NPMTooltip support for the CodeMirror code editor

< 1.1.2NVD

@material/tooltip

NPMThe Material Components Web tooltip component.

< 1.1.2NVD

codemirror/tooltip

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Tooltip support for the CodeMirror code editor

< 1.1.2NVD

@atlaskit/tooltip

NPMA tooltip briefly describes an interactive element on mouse hover or keyboard focus.

< 1.1.2NVD

@rmwc/tooltip

NPMTooltips display informative text when users hover over, focus on, or tap an element.

< 1.1.2NVD

@react-aria/tooltip

NPMSpectrum UI components in React

< 1.1.2NVD

@react-stately/tooltip

NPMSpectrum UI components in React

< 1.1.2NVD

@react-types/tooltip

NPMSpectrum UI components in React

< 1.1.2NVD

@reach/tooltip

NPMAccessible tooltips

< 1.1.2NVD

HubSpot/tooltip

GitHubCSS Tooltips built on Tether. #hubspot-open-source

< 1.1.2NVD

@fengyuanchen/tooltip

NPMA simple jQuery tooltip plugin.

< 1.1.2NVD

react-component/tooltip

GitHub💡 Positioned React tooltip for hover, focus, click, and controlled popup flows.

< 1.1.2NVD

Security Advisories

CVE-2024-13292

Description

More on this CVE