Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Firefox infoRSS 输入验证错误漏洞
Vulnerability Description
Firefox infoRSS 1.1.4.2版本及其早期扩展版本具有chrome特权来执行特定操作,这允许远程攻击者可以借助RSS feed描述标签,执行任意指令并执行跨域脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A