CVE-2019-12966

FeHelper extension (through 2019-06-19) is reported to permit arbitrary code execution during a JSON format operation, demonstrated by the payload {"a":(function(){confirm(1)})()}. Affected software: FeHelper (browser extension) as of the cited timeframe. Root cause: JSON formatting operation lea...