CVE-2013-6853

Cross-site scripting (XSS) vulnerability in clickstream.js in Y!

published January 26, 2014

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01930 · 79.8th percentile
Published
2014-01-26T01:00Z
EPSS history
Timeline
  • 26 JAN 01:00Z
    Cross-site scripting (XSS) vulnerability in clickstream.js in Y!
    cvelistv5