CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Windows. Its EPSS score suggests a 28.4% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2007-3033
Severity
MEDIUM
CVSS
4.3
EPSS
28.37%
Windows
Original NVD Description
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.