Alaev SEO Tools Extension vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Alaev SEO Tools Extension: 1 record(s), with affected versions and fixes.

CVE-2026-19988 Medium · 4.3 CWE-74 Aug 17, 2026

Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.