CVE-2007-2060

no score yetEPSS 3.2%

Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
Published: 2007-04-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wizz_computers:wizz_rss_reader

References

http://osvdb.org/34534
http://secunia.com/advisories/24913
http://wizzrss.blat.co.za/2009/11/17/so-much-for-nsiscriptableunescapehtmlparsefragment/
http://www.kb.cert.org/vuls/id/319464
http://www.kb.cert.org/vuls/id/MIMG-6ZKP4T

Check your stack JSON