CVE-2013-5612

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 26.0 SeaMonkey versions prior to 2.23

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is due to a Same Origin Policy violation triggered by the lack of a charset parameter in a Content-Type HTTP header.

Recommendations For Mozilla Firefox versions prior to 26.0, update to version 26.0 or later. For SeaMonkey versions prior to 2.23, update to version 2.23 or later.