DeepL Chrome Browser Extension Cross-Site Scripting Vulnerability
Vulnerability
A cross-site scripting (XSS) vulnerability has been identified in the DeepL Chrome browser extension, specifically in versions 1.22.0 prior to 1.23.0. This vulnerability allows attackers to execute arbitrary scripts in the context of the user's browser and inject malicious HTML into web pages being viewed.
Impact
Exploitation of this vulnerability allows for the execution of arbitrary scripts in the user's browser, potentially leading to the injection of malicious HTML into web pages.
Remediation
Users are advised to update the DeepL Chrome browser extension to version 1.24.0, the latest version that addresses this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.