CVE-2025-69771

The asbplayer Chrome Extension version 1.14.0 is vulnerable to a Cross-Site Scripting (XSS) flaw in its subtitle loading function. Attackers can exploit this by providing a crafted .srt subtitle file to execute arbitrary JavaScript within the context of the active streaming platform. Due to the s...