Threats tagged 'ghsa-7ccf-f2c3-qwpg'

A script injection vulnerability (UXSS) exists in the UI of Google Chrome versions prior to 148.0.7778.96. This flaw allows a remote attacker to inject arbitrary scripts or HTML by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability has a low severity rating from Chromium and a CVSS score of 4.2, indicating medium severity. No public exploits or known active exploitation have been reported. No patch information is provided in the input data.