CVE-2006-4710

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-12 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite.

Affected products

Newsgator Feeddemon: through 2.0.0.24

References

http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html
http://nick.typepad.com/blog/2006/08/feed_security_a_1.html
http://secunia.com/advisories/21995
http://www.cgisecurity.com/papers/RSS-Security.ppt
http://www.securityfocus.com/bid/20114
http://www.snellspace.com/wp/?p=426
http://www.snellspace.com/wp/?p=448
http://www.vupen.com/english/advisories/2006/3686
https://exchange.xforce.ibmcloud.com/vulnerabilities/29047
http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html
http://nick.typepad.com/blog/2006/08/feed_security_a_1.html
http://secunia.com/advisories/21995

Get alerted when CVE-2006-4710 or the next vulnerability affects your stack