SPI Dynamics have reported some vulnerabilities in FeedDemon, which can be exploited by malicious people to conduct script insertion attacks.

The vulnerabilities are caused due to input validation errors in the processing of Atom feeds. This can be exploited to inject and execute arbitrary HTML and script code in context of the Atom feed by tricking a user into adding a malicious Atom feed and then viewing the contents of it.

Solution
Update to version 2.0.0.25:
Further details available in Customer Area

Provided and/or discovered by
SPI Dynamics

Original Advisory
NewsGator Technologies:
http://nick.typepad.com/blog/2006/08/feed_security_a_1.html
http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html

SPI Dynamics:
http://www.cgisecurity.com/papers/RSS-Security.ppt

Deep Links
Links available in Customer Area