CVE-2006-4762: Rssreader

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.

Affected products

• Rssreader Rssreader: any version

Published 2006-09-13. Last modified 2026-06-16.