Cross site scripting

2010-10-2119:00:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

JSON

Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

CPENameOperatorVersion
opera_browsereq7.01
opera_browsereq9.27
opera_browsereq7.23
opera_browsereq9.50 beta1
opera_browsereq9.02
opera_browsereq10.53 b
opera_browsereq7.03
opera_browsereq10.10
opera_browsereq7.53
opera_browsereq8.50

Name	Operator	Version
opera_browser	eq	7.01
opera_browser	eq	9.27
opera_browser	eq	7.23
opera_browser	eq	9.50 beta1
opera_browser	eq	9.02
opera_browser	eq	10.53 b
opera_browser	eq	7.03
opera_browser	eq	10.10
opera_browser	eq	7.53
opera_browser	eq	8.50