Naver Whale Browser Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in versions prior to 3.12.129.18 of Naver Whale Browser, a web browser from Naver Korea that supports user-defined interfaces, due to a lack of data validation filtering of user-supplied and output data. An attacker could exploit this to allow extension...

PT-2022-16451

Name of the Vulnerable Software and Affected Versions Whale browser versions prior to 3.12.129.18 Description The issue concerns the devtools API in the Whale browser, which allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow...