CVE-2005-1669

2022-10-0316:22:42

mitre

www.cve.org

xss

opera

remote_attackers

access_restrictions

unauthorized_actions

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

Cross-site scripting (XSS) vulnerability in Opera 8.0 Final Build 1095 allows remote attackers to inject arbitrary web script or HTML via “javascript:” URLs when a new window or frame is opened, which allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains.