Command Injection

chrometabs plugin is vulnerable to Command Injection. The vulnerability is due to improper neutralization of a SQL-controlled URL value before it is embedded into an AppleScript template and executed via osascript, which allows an authenticated attacker with local CLI access to inject arbitrary...

PT-2026-47572

AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin | Field | Value | | ---------------- | ----- | | Repository | julien040/anyquery | | Affected version | 0.4.4 commit 0abd460 | | Vulnerability | CWE-94 — Improper Control of Generation of Code | | Severity | High | Summary Th...