Field Assessment
AI analysis pending.
CVE
CVE-2011-3218
Severity
LOW
CVSS
2.6
EPSS
1.29%
Original Filing — NVD Description
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.