Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows Mac OS X Linux and Solaris and before 10.3.186.7 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted URL related to a \universal cross-site scripting issue \ as exploited in the wild in September 2011.