VYPR
← All advisories
Moderate severityNVD Advisory· Published Apr 11, 2011· Updated Jun 16, 2026

CVE-2009-5065

CVE-2009-5065

Description

Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested CDATA stanzas.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
feedparserPyPI
< 5.05.0

Affected products

10
  • Mark Pilgrim/Feedparser9 versions
    cpe:2.3:a:mark_pilgrim:feedparser:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:mark_pilgrim:feedparser:*:*:*:*:*:*:*:*range: <=4.1
    • cpe:2.3:a:mark_pilgrim:feedparser:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mark_pilgrim:feedparser:4.0.2:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:pypi/feedparser
    Range: < 5.0

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.