VULNERABILITY INTELLIGENCE

CVE-2006-4660

CVSS score5.8 MEDIUM
EPSS probability1.34%
CISA KEVNot currently listed
Published2006-09-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed.

Primary references