CVE-2007-6520

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown...

4.3 Medium

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.

Exploit likelihood

1.60%Down 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.

Record: CVE-2007-6520
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.

Record: CVE-2007-6520
Updated: 2026-11-02

EUVDEUVD-2007-6486 No score

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.

Record: EUVD-2007-6486
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fm3c-rmmm-pfpq No score

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown...

Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.

Record: GHSA-fm3c-rmmm-pfpq
Weakness: CWE-79
Updated: 2026-11-02

Affected products

opera browser

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, references, title	GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6520 is a medium vulnerability (CVSS 4.3) in Opera Browser, published December 24, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 75th percentile. No source names a fixed version.

References

Show 8 moreShow less