Description
Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Unscored
CVE-2021-40927
EUVD-2021-28081GHSA-2fh4-p8g3-4vjj
Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary…
Published Oct 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre