Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Winamp | Nullsoft | 2.78 (including) | 2.78 (including) |
| Winamp | Nullsoft | 2.79 (including) | 2.79 (including) |