Unrated severityNVD Advisory· Published Sep 8, 2011· Updated Jun 16, 2026
CVE-2011-3384
CVE-2011-3384
Description
Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:sage-mozdev:sage:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sage-mozdev:sage:*:*:*:*:*:*:*:*range: <=1.3.10
- cpe:2.3:a:sage-mozdev:sage:1.3.8:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.