CVE-2012-1214

Yoono Desktop < 1.8.20 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action.

Scores

EPSS 0.0029
EPSS Percentile 51.6%

Classification

CWE
CWE-79
Status published

Affected Products (2)

yoono/yoono_desktop < 1.8.20
n/a/n/a

Timeline

Published Feb 21, 2012
Tracked Since Feb 18, 2026