Cross site scripting

2009-11-2913:08:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.4%

JSON

infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed.

CPENameOperatorVersion
inforssle1.1.4.2
inforsseq0.5
inforsseq0.7.7
inforsseq0.8.4
inforsseq0.8.7
inforsseq0.8.8.1
inforsseq0.8.8.2
inforsseq0.8.9
inforsseq0.8.9.1
inforsseq0.8.9.3