XSS in Mozilla

CVE-2002-2359

Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

Affected products

Mozilla — versions 1.0, 1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (vdb-entry, x_refsource_XF)