CVE-2021-37518

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Feb 3, 2023 (Feb 3, 2023)

Modified

Jun 17, 2026

Description

Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.

Vendors: vimium project
Products: vimium
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.