3 matches found
CVE-2011-3384
Cross-site scripting XSS vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102...
CVE-2011-3384
Cross-site scripting XSS vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102...
CVE-2011-3384
CVE-2011-3384 affects the Sage Firefox add-on (versions 1.3.10 and earlier). The root cause is improper processing during HTML page output based on feed information, enabling a cross-site scripting (XSS) vulnerability that could allow arbitrary scripts to run in the user’s browser. The documented...