PT-2018-17696

Name of the Vulnerable Software and Affected Versions Grammarly extension versions prior to 2018-02-02 for Chrome Description The issue allows remote attackers to discover authentication tokens. This is achieved by sending an 'action: "user"' request to the "iframe.gr -ifr" endpoint, because the...

Grammarly Patches Chrome Extension Bug That Exposed Users’ Docs

UPDATE Grammarly has fixed a bug with its Chrome browser extension that exposed its authorization tokens to websites, allowing sites to assume the identity of a user and view their account’s documents. “I’m calling this a high severity bug, because it seems like a pretty severe violation of user...

grammarly.com XSS vulnerability

Vulnerable URL: https://www.grammarly.com/blog/?p=" Details: Description| Value ---|--- Patched:| Yes, at 09.10.2017 Latest check for patch:| 09.10.2017 13:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 811 VIP website status:| Yes Coordinated Disclosure...