CVE-2011-2670

MediumCVSS 6.1/10Last modified Jun 16, 2026

Description

Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
MozillaFirefoxbefore 3.6

References

Timeline

Published
Jan 13, 2020
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-26717.5Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknowCVE-2011-26724.3Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via uCVE-2011-26734.3Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspCVE-2011-26744.9BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated userCVE-2011-26754.3Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspeCVE-2011-26765.5The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not reqCVE-2011-26775.5Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time cCVE-2011-26786.8The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe,CVE-2011-26794.3Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary wCVE-2011-268010.0Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the CVE-2011-268110.0IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectoCVE-2011-26824.0The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (li
CVE-2011-2670: Medium severity, CVSS 6.1 | Vulnix