Lucene search
K

7 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/04/22 6:45 a.m.6 views

DeepL Chrome browser extension vulnerable to cross-site scripting

Overview DeepL Chrome browser extension contains the following vulnerability. Cross-site scripting CWE-79 - CVE-2026-40451 This vulnerability was reported by the researchers below and JPCERT/CC coordinated with the developer. Junki Yuasa of Cybozu, Inc. reported this vulnerability to JPCERT/CC...

6.1CVSS6.2AI score0.00037EPSS
Exploits0References4
NVD
NVD
added 2026/04/22 5:16 a.m.0 views

CVE-2026-40451

DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in a user's browser, and inject malicious HTML into web pages viewed by the user...

6.1CVSS0.00037EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/22 4:28 a.m.22 views

CVE-2026-40451

DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in a user's browser, and inject malicious HTML into web pages viewed by the user...

6.1CVSS0.00037EPSS
Exploits0References2
CVE
CVE
added 2026/04/22 4:28 a.m.5 views

CVE-2026-40451

The CVE-2026-40451 entry affects the DeepL Chrome extension, specifically versions 1.22.0 through 1.23.0. It describes a cross-site scripting vulnerability that allows an attacker to execute arbitrary scripts in a user’s browser and inject malicious HTML into pages viewed by the user. The provide...

6.1CVSS6.5AI score0.00037EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/22 4:28 a.m.1 views

CVE-2026-40451

DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in a user's browser, and inject malicious HTML into web pages viewed by the user...

6.1CVSS6.5AI score0.00037EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/22 4:28 a.m.0 views

EUVD-2026-24605

DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in a user's browser, and inject malicious HTML into web pages viewed by the user...

6.1CVSS6.5AI score0.00037EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.1 views

PT-2026-34249

Name of the Vulnerable Software and Affected Versions DeepL Chrome browser extension versions 1.22.0 through 1.23.0 Description A cross-site scripting flaw allows an attacker to execute arbitrary script in a user's browser and inject malicious HTML into web pages viewed by the user. Recommendatio...

6.1CVSS6.5AI score0.00037EPSS
Exploits0References7
Rows per page
Query Builder