VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 4, 2012· Updated Apr 29, 2026

CVE-2012-1252

CVE-2012-1252

Description

Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a different vulnerability than CVE-2006-4760.

Affected products

17
  • Rssowl/Rssowl17 versions
    cpe:2.3:a:rssowl:rssowl:2.0.1:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:rssowl:rssowl:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:*:*:*:*:*:*:*:*range: <=2.1
    • cpe:2.3:a:rssowl:rssowl:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:milestone5a:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:milestone6:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:milestone7:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:milestone8:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:milestone8a:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:milestone9:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:rssowl:rssowl:2.0:rc3:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.