CVE-2012-2634

Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed.

Date published : 2012-06-15

http://jvn.jp/en/jp/JVN18397171/index.html

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000056