CyberSec.Space Logo
Back to CVE Browser

CVE-2018-12587

MEDIUM
6.1
CVSS Severity Score
EPSS Score0.0670%
EPSS Percentile40.54th
PublishedAug 13, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar.

Affected Platforms (CPE)

📦
German Spelling Dictionary Project

German Spelling Dictionary

= 1.3

References & Advisories

🔗 https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txt
🔗 https://www.openbugbounty.org/reports/610381/
🔗 https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txt
🔗 https://www.openbugbounty.org/reports/610381/

Related Vulnerabilities

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...