Description
Cross-site scripting (XSS) vulnerability in the RSS reader in Glue Software NewsGlue before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via a feed.
References
- newsglue-rss-feed-xss(33166) vdb-entry
- ADV-2007-1074 vdb-entry
- 23094 vdb-entry
- 34408 vdb-entry
- JVN#64227086 third-party-advisory
- 24603 third-party-advisory
- http://www.gluesoft.co.jp/NewsGlue/Update.aspx