Medium · 6.1 CVE-2021-37518 EUVD-2021-24080GHSA-7wx8-v5hr-wv3m

Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via …

Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre

Description

Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.

References

https://github.com/philc/vimium/issues/3832
https://github.com/philc/vimium/pull/3850