TI-2024-23625 CVE-2024-35756 · GHSA-gcgr-r4h6-g3pxWordPress Tooltip CK plugin <= 2.2.15 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 26Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CeiKay Tooltip CK tooltip-ck allows Stored XSS.This issue affects Tooltip CK: from n/a through 2.2.15.CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00276 · Published 2024-06-08 · No fix listed CWE-79