CVE

Id
66800  
CVE No.
CVE-2013-6853  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.20130813024103 for Mac, and 2.5.9.2013418100420 for Windows, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is stored by the victim.  
Phase
Assigned (20131122)  
Votes
None (candidate not yet proposed)  
Comments