XSS in Opera Browser

CVE-2012-6464

Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.014 (68.6th percentile) — read the EPSS interpretation.

Affected products

Opera Opera_browser — versions 1.00, 2.00, 2.10
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)