CyberRota Analysis
AI-GeneratedThe Alaev SEO Tools Extension for Chrome is vulnerable to a cross-site scripting (XSS) attack due to improper handling in the addDiv function of its Popup UI. This flaw allows remote attackers to manipulate the extension, potentially leading to unauthorized actions or data exposure. Users and organizations utilizing this extension should prioritize immediate updates or removal to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.