CVE-2007-0362 Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly r...
MediumCVSS 6.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freshreader | All versions | No fix listed |
References
- JVN#95249468 third-party-advisory
- manual.freshreader.com
- 32923 vdb-entry
- 23806 third-party-advisory vendor-advisory
- 22106 vdb-entry
- ADV-2007-0241 vdb-entry
- freshreader-rssfeed-xss(31566) vdb-entry