• info
• discussion
• exploit
• solution
• references

FeedDemon 'Feed Preview' Arbitrary Script Injection Vulnerability

FeedDemon is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code within the context of the application.

Versions prior to FeedDemon 4.1.0.0 are vulnerable.