CVE-2018-12587

2018-08-1317:00:00

mitre

www.cve.org

EPSS

0.001

Percentile

39.8%

JSON

A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar.