CVE-2019-18893

XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code…

published January 13, 2020

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code in the context of this component. While Video Downloader is technically a browser extension, it is granted a very wide set of privileges and can for example access cookies and browsing history, spy on the user while they are surfing the web, and alter their surfing experience in almost arbitrary ways.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01771 · 78.0th percentile
Published
2020-01-13T16:09Z
EPSS history
Timeline
  • 13 JAN 16:09Z
    XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute their code…
    cvelistv5