Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2018-20524

The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Policy (CSP).

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Urlchatbox
Products
Chat Anywhere