CVE-2011-2670: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets...