Security Advisory

CVE-2024-49378

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-25 12:55:30
Last updated 2024-10-25 14:37:25
Assigner GitHub_M
State PUBLISHED

Description

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches exist.