Description
Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.
References
- http://cybozu.co.jp/products/dl/notice/detail/0023.html
- http://www.lac.co.jp/english/advisory/99_e.html
- 46565 vdb-entry
- 29981 vdb-entry
- garoon-rss-xss(43426) vdb-entry
- JVN#52363223 third-party-advisory
- 30871 third-party-advisory
- JVNDB-2008-000035 third-party-advisory