← Database

CVE-2009-1714

MEDIUM CVSS: 4.3 Published: 2009-06-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.

Affected Platforms

Apple Safari

Weakness Type

CWE-79

References