CVE-2009-5065
mark pilgrim feedparser: no CVSS score yet. EPSS 4.5% chance of exploitation in the next 30 days. Fixed in feedparser 5.0.
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.
- EPSS
- 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mark_pilgrim:feedparser
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-3mwg-gp5g-fv3q | PyPI | feedparser | <5.0 | 5.0 |
| PYSEC-2011-18 | PyPI | feedparser | <5.0 | 5.0 |