CVE-2007-2060: Wizz Computers Wizz Rss Reader

Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.

Affected products

• Wizz Computers Wizz Rss Reader: up to and including 2.1.8

Published 2007-04-18. Last modified 2026-06-16.