JVN#77947437: RSSOwl vulnerable to arbitrary script execution

2012-05-25T00:00:00
ID JVN:77947437
Type jvn
Reporter Japan Vulnerability Notes
Modified 2012-05-30T00:00:00

Description

## Description

RSSOwl is an RSS/Atom feed reader. RSSOwl is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information.

## Impact

An arbitrary script may be executed on the user's web browser.

## Solution

Update the software
Update to the latest version according to the information provided by the developer.

## Products Affected

  • RSSOwl versions prior to 2.1.1