CVE-2019-25084

CVE-2019-25084 affects the Chrome extension “Hide Files on GitHub” (versions up to 2.x). The vulnerability lies in the extension’s file extension/options.js function addEventListener , enabling cross-site scripting. The issue can be triggered remotely, and upgrading to version 3.0.0 mitigates it....