description: A mechanism to inject static HTML into the RSS reader preview page due to a failure to escape characters sent as URL parameters for a feed's "TITLE" element. This vulnerability allows for spoofing but no scripted content can be run. This vulnerability affects Firefox < 53.
problem types: HTML injection into RSS Reader feed preview page through TITLE element
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 53, status: affected, version: unspecified, versionType: custom
}