CVE-2012-4144

2012-08-0616:00:00

mitre

www.cve.org

opera

xss

windows

unix

mac os x

AI Score

5.3

Confidence

High

EPSS

0.003

Percentile

69.4%

JSON

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.