CVE-2006-4760

Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.

Score
CVSS 2.0 4.3 Medium
Status
Modified - cve@mitre.org
Published
2006-09-13
Last modified
2024-08-07

Affected products

References

 
 
© AVABIS GmbH privacypolicy about