CVE-2012-1215: Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for...

Security readout for executives and security teams

This CVE is a cross-site scripting flaw in the Yoono Firefox extension before 7.7.8. A remote attacker could inject script or HTML through the Add friends module when creating a group. Business impact is mainly endpoint and browser-session risk for users still running the vulnerable extension. Exposure appears limited to systems using the legacy Yoono Firefox extension before version 7.7.8. Organizations without this extension, or with version 7.7.8 or later, are not shown as affected by the provided sources. Handle as a targeted legacy cleanup item, not an emergency response, unless the extension is present on sensitive endpoints. The main business action is confirming whether this old browser extension exists in the environment. Mitigation focus: Inventory Firefox extensions for Yoono installations and versions.; Upgrade Yoono for Firefox to 7.7.8 or later where available.; Remove the extension where it is no longer required..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.