Cross-site scripting (XSS) vulnerability in Opera via a crafted HTML document (rpm)| ID: oval:org.secpod.oval:def:6760 | Date: (C)2012-08-29 (M)2023-12-02 |
| Class: VULNERABILITY | Family: unix |
The host is installed with Opera before 12.01 and is prone to Cross-site scripting (XSS) vulnerability. A flaw is present in the application, which fails to properly escape characters in DOM elements. Successful exploitation allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.
