Description
Cross-site scripting (XSS) vulnerability in Quick Look in Apple OS X before 10.10.5 allows remote attackers to inject arbitrary web script or HTML via a previously visited web site that is rendered during a Quick Look search.
References
- 76340 vdb-entry
- APPLE-SA-2015-08-13-2 vendor-advisory
- https://support.apple.com/kb/HT205031
- 1033276 vdb-entry