CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Chrome.
CVE
CVE-2022-2861
Severity
MEDIUM
CVSS
6.5
EPSS
0.61%
Chrome
Original NVD Description
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page.
Related CVEs
Other vulnerabilities affecting the same vendor(s)