← Database

CVE-2007-3760

MEDIUM CVSS: 4.3 Published: 2007-09-27 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags.

Affected Platforms

Apple SafariMicrosoft Windows XpApple Mac Os XApple Iphone OsMicrosoft Windows Vista

Weakness Type

CWE-79

References