Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scripting (XSS) attacks, and conduct cross-zone scripting attacks involving the Feed Subscription Page to read feeds or create feed subscriptions, via a crafted feed, related to the rendering of the application/rss+xml content type as "scripted content."
2009-09-18T22:30:00.640
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.0 | Yes |
| Application | opera | opera_browser | 5.02 | Yes |
| Application | opera | opera_browser | 5.10 | Yes |
| Application | opera | opera_browser | 5.11 | Yes |
| Application | opera | opera_browser | 5.12 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.0 | Yes |
| Application | opera | opera_browser | 6.1 | Yes |
| Application | opera | opera_browser | 6.01 | Yes |
| Application | opera | opera_browser | 6.1 | Yes |
| Application | opera | opera_browser | 6.02 | Yes |
| Application | opera | opera_browser | 6.03 | Yes |
| Application | opera | opera_browser | 6.04 | Yes |
| Application | opera | opera_browser | 6.05 | Yes |
| Application | opera | opera_browser | 6.06 | Yes |
| Application | opera | opera_browser | 6.11 | Yes |
| Application | opera | opera_browser | 6.12 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.0 | Yes |
| Application | opera | opera_browser | 7.01 | Yes |
| Application | opera | opera_browser | 7.02 | Yes |
| Application | opera | opera_browser | 7.03 | Yes |
| Application | opera | opera_browser | 7.10 | Yes |
| Application | opera | opera_browser | 7.10 | Yes |
| Application | opera | opera_browser | 7.11 | Yes |
| Application | opera | opera_browser | 7.11 | Yes |
| Application | opera | opera_browser | 7.20 | Yes |
| Application | opera | opera_browser | 7.20 | Yes |
| Application | opera | opera_browser | 7.21 | Yes |
| Application | opera | opera_browser | 7.22 | Yes |
| Application | opera | opera_browser | 7.23 | Yes |
| Application | opera | opera_browser | 7.50 | Yes |
| Application | opera | opera_browser | 7.50 | Yes |
| Application | opera | opera_browser | 7.51 | Yes |
| Application | opera | opera_browser | 7.52 | Yes |
| Application | opera | opera_browser | 7.53 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.54 | Yes |
| Application | opera | opera_browser | 7.60 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.0 | Yes |
| Application | opera | opera_browser | 8.01 | Yes |
| Application | opera | opera_browser | 8.02 | Yes |
| Application | opera | opera_browser | 8.50 | Yes |
| Application | opera | opera_browser | 8.51 | Yes |
| Application | opera | opera_browser | 8.52 | Yes |
| Application | opera | opera_browser | 8.53 | Yes |
| Application | opera | opera_browser | 8.54 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.0 | Yes |
| Application | opera | opera_browser | 9.01 | Yes |
| Application | opera | opera_browser | 9.02 | Yes |
| Application | opera | opera_browser | 9.10 | Yes |
| Application | opera | opera_browser | 9.12 | Yes |
| Application | opera | opera_browser | 9.20 | Yes |
| Application | opera | opera_browser | 9.20 | Yes |
| Application | opera | opera_browser | 9.21 | Yes |
| Application | opera | opera_browser | 9.22 | Yes |
| Application | opera | opera_browser | 9.23 | Yes |
| Application | opera | opera_browser | 9.24 | Yes |
| Application | opera | opera_browser | 9.25 | Yes |
| Application | opera | opera_browser | 9.26 | Yes |
| Application | opera | opera_browser | 9.27 | Yes |
| Application | opera | opera_browser | 9.50 | Yes |
| Application | opera | opera_browser | 9.50 | Yes |
| Application | opera | opera_browser | 9.50 | Yes |
| Application | opera | opera_browser | 9.51 | Yes |
| Application | opera | opera_browser | 9.52 | Yes |
| Application | opera | opera_browser | 9.60 | Yes |
| Application | opera | opera_browser | 9.60 | Yes |
| Application | opera | opera_browser | 9.61 | Yes |
| Application | opera | opera_browser | 9.62 | Yes |
| Application | opera | opera_browser | 9.63 | Yes |
| Application | opera | opera_browser | 9.64 | Yes |
| Application | opera | opera_browser | 10.00 | Yes |
| Application | opera | opera_browser | 10.00 | Yes |
| Application | opera | opera_browser | 10.00 | Yes |
| Application | opera | opera_browser | 10.00 | Yes |
| Application | opera | opera_browser | 10.01 | Yes |
| Application | opera | opera_browser | 10.10 | Yes |
| Application | opera | opera_browser | 10.10 | Yes |
| Application | opera | opera_browser | 10.50 | Yes |
| Application | opera | opera_browser | 10.50 | Yes |
| Application | opera | opera_browser | 10.50 | Yes |
| Application | opera | opera_browser | 10.51 | Yes |
| Application | opera | opera_browser | 10.52 | Yes |
| Application | opera | opera_browser | 10.53 | Yes |
| Application | opera | opera_browser | 10.53 | Yes |