CVE-2006-4760: Benjamin Pasero And Tobias Eichert Rssowl

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.

Affected products

• Benjamin Pasero And Tobias Eichert Rssowl: any version

Published 2006-09-13. Last modified 2026-06-16.