Cross-site scripting (XSS) vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed.
Affected Platforms
Apple SafariMicrosoft Windows 7Microsoft Windows XpApple Mac Os XApple WebkitMicrosoft Windows VistaApple Mac Os X Server