Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FeedDemon脚本插入漏洞
Vulnerability Description
FeedDemon是流行的Windows RSS阅读器,允许用户在桌面上查看和管理RSS源。 FeedDemon中存在脚本插入漏洞,该漏洞源于通过外界源传递的输入在源预览中使用之前未经正确验证。攻击者可利用该漏洞插入任意HTML和脚本代码,如果浏览恶意数据,将在受影响站点上下文的用户浏览器会话中执行它。FeedDemon 4.0之前版本中存在该漏洞。
CVSS Information
N/A
Vulnerability Type
N/A