CVE-2019-12592

A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome allows remote attackers to run arbitrary…

published June 18, 2019

CVSS
—
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome allows remote attackers to run arbitrary web script or HTML in the context of any loaded 3rd-party IFrame.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01076 · 64.7th percentile
Published
2019-06-18T20:38Z
EPSS history
Timeline
  • 18 JUN 20:38Z
    A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome allows remote attackers to run arbitrary…
    cvelistv5