Command Injection

chrometabs plugin is vulnerable to Command Injection. The vulnerability is due to improper neutralization of a SQL-controlled URL value before it is embedded into an AppleScript template and executed via osascript, which allows an authenticated attacker with local CLI access to inject arbitrary...