Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows Mac OS X Linux and Solaris and 10.3.185.22 and earlier on Android allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a \universal cross-site scripting vulnerability.\