CVE-2017-5453: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox < 53.

Affected products

• Mozilla Firefox: before 53.0 (fixed in 53.0)

Published 2018-06-11. Last modified 2026-06-17.