TI-2008-00413 CVE-2008-0438 · GHSA-x599-j43r-893mCross-site scripting (XSS) vulnerability in the font rendering functionality in…Priority LOW 25Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the txt parameter to a Flash (SWF) file, as demon…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02927 · Published 2008-01-23 · No fix listed CWE-79