← Database

CVE-2009-1715

MEDIUM CVSS: 4.3 Published: 2009-06-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges.

Affected Platforms

Apple Safari

Weakness Type

CWE-79

References