Description

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.

Remediation

References

CVE-2012-5881

Related Vulnerabilities

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2202)

PHP Other Vulnerability (CVE-2005-3389)

MySQL CVE-2021-35624 Vulnerability (CVE-2021-35624)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.18)

Oracle Database Server CVE-2013-3790 Vulnerability (CVE-2013-3790)

Severity

Medium

Classification

CVE-2012-5881 CWE-707

Tags

Missing Update Known Vulnerabilities