| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 2.0.0.14= 2.0.0.15= 2.0.0.16 |
Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via HTML-escaped low surrogate characters that are ignored by the HTML parser, as demonstrated by a "jav�ascript" sequence, aka "HTML escaped low surrogates bug."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free