CVE-2002-1335

Cross-site scripting XSS vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies...

CVE-2002-1335

CVE-2002-1335 affects w3m 0.3.2, where an HTML tag inside a frame is not escaped, enabling cross-site scripting. The vulnerability allows a remote attacker to run arbitrary scripts or access files and cookies by injecting HTML/script in the frame content. Documented impact is limited to partial i...