Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sage Extension for Firefox "img" 跨站脚本漏洞
Vulnerability Description
Firefox Sage extension 1.3.8及之前版本存在跨站脚本攻击漏洞，远程攻击者可以借助一个带有IMG标识的RSS输入端，在本地环境下运行任意的Javascript。该img标签包含被额外的拖拽的">"跟随的脚本。
CVSS Information
N/A
Vulnerability Type
N/A