LastPass 'websiteConnector.js' Remote Code Execution Vulnerability

LastPass LastPass Password Manager is a free cross-platform online password management tool developed by LastPass Inc. in the United States. The tool can be integrated with the browser and provides it with password management, auto-fill forms and other features, support for random password...

LastPass websiteConnector.js content script allows proxying internal RPC commands

noticed this entry in the contentscript array from the LastPass manifest: "matches": "https://1min-ui-prod.service.lastpass.com/" , "js": "1minsignup/chrome/websiteConnector.js" , "allframes": true, "runat": "documentend" , That's a content script that is only used for one specific lastpass.com...