CVE-2006-4712

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a…

published September 12, 2006

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02242 · 82.7th percentile
Published
2006-09-12T16:00Z
EPSS history
Timeline
  • 12 SEP 16:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a…
    cvelistv5