CVE-2007-1610

Cross-site scripting XSS vulnerability in the RSS reader in Glue Software NewsGlue before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via a feed...

CVE-2007-1610

The CVE-2007-1610 entry concerns NewsGlue’s RSS readers (NewsGlue before 1.3.4). Connected sources (JVNDB-2007-000225) describe an arbitrary script execution vulnerability arising from improper handling of RSS feed content, i.e., XSS, in NewsGlue and Ikinari Jijyoutsuu. Impact is arbitrary script...