https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T08:28:39.988511+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00569 bdu:2025-00569 2026-10-19T08:28:39.991745+00:00 bdu:2025-00569 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-058 DRUPAL-CONTRIB-2024-058 2026-10-19T08:28:39.991776+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/tooltip

This module enables you to add any HTML content you want in a tooltip displayed on mouse hover.

The module does not sufficiently escape the markup inserted in the tooltip block.

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer blocks".

 https://cve.radiocsirt.org/vuln/euvd-2026-210009 EUVD-2026-210009 2026-10-19T08:28:39.991809+00:00 EUVD-2026-210009 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13292 fkie_cve-2024-13292 2026-10-19T08:28:39.991821+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tooltip allows Cross-Site Scripting (XSS).This issue affects Tooltip: from 0.0.0 before 1.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-ch9r-7w7v-gg4p GHSA-ch9r-7w7v-gg4p 2026-10-19T08:28:39.991841+00:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Tooltip allows Cross-Site Scripting (XSS).This issue affects Tooltip: from 0.0.0 before 1.1.2.