Security Advisory
CVE-2011-0681
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Cascading Style Sheets (CSS) Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL.