CVE-2010-3262 Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flock | <= 3.0.0.3989 | No fix listed |
References
- flock.com vendor-advisory
- 20100914 [FLOCK-SA-2010-02] Flock Browser: A malicious RSS feed can bypass cross origin protection (XSS) mailing-list
- 43225 vdb-entry
- flock-rss-xss(61820) vdb-entry