Vulnerabilities > Didier Ernotte > Inforss > 1.1.3
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-11-29 | CVE-2009-4101 | Improper Input Validation vulnerability in Didier Ernotte Inforss infoRSS 1.1.4.2 and earlier extension for Firefox performs certain operations with chrome privileges, which allows remote attackers to execute arbitrary commands and perform cross-domain scripting attacks via the description tag of an RSS feed. | 9.3 |