jquerytools/jquerytools — Issue #569: tooltips not XSS compliant
Author: derricke
Created: 2011-11-22 02:31:49+00:00
State: open

$notes is pulled from db as:
run through filter gives: <script>alert('hi');</script>

php code with htmlentiies() and addslashes()
echo '
tooltips replaces all of the filtered characters back and the script actually runs.

sourcecode from actual page:

It looks like tooltips is removing the filtering and onmouseover runs the alert.

This is a pretty big issue as it will allow xss attacks and stolen cookies etc.