CVE-2015-7187

The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site…

published November 5, 2015

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via inline JavaScript code that is executed within a third-party extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01889 · 79.3th percentile
Published
2015-11-05T02:00Z
EPSS history
Timeline
  • 05 NOV 02:00Z
    The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: false" panel setting, which makes it easier for remote attackers to conduct cross-site…
    cvelistv5