mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 23:31:36 +02:00
727 B
727 B
CVE-2020-10544
Description
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.
POC
Reference
No PoCs from references.