CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.6. See the original NVD description below for full technical details.
CVE
CVE-2011-3218
Severity
LOW
CVSS
2.6
EPSS
1.29%
Original NVD Description
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.