CVE-2011-2670 — Cross-site Scripting in Mozilla Firefox

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 44.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxDebian FirefoxDebian Firefox-esr
Timeline
PublishedJan 13
Latest updateApr 22

Description

Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages4 packages

▶NVDmozilla/firefox< 3.6
▶CVEListV5mozilla/firefoxbefore 3.6

🔴Vulnerability Details

1
GHSA
GHSA-wg6h-56g7-mfvv: Mozilla Firefox before 3↗2022-04-22
▶

📋Vendor Advisories

1
Debian
CVE-2011-2670: firefox - Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading S...↗2011
▶