CVE-2009-4101

CVE-2009-4101 affects infoRSS for Firefox (1.1.4.2 and earlier). The extension processes the RSS feed description with chrome privileges, enabling remote attackers to execute arbitrary commands and perform cross-domain scripting via the description tag. Affected: infoRSS Firefox extension; impact...