Mozilla : Security vulnerabilities, CVEs xss, cross site scripting published in March 2014

CVE-2014-1504

The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document that is accessed after a browser restart.

Max CVSS

2.6

EPSS Score

0.40%

Published

2014-03-19

Updated

2020-08-10

1 vulnerabilities found

Mozilla : Security Vulnerabilities, CVEs, Published In March 2014 (XSS)

CVE-2014-1504