Threats tagged 'ghsa-hjhr-m4xv-543v'

A vulnerability exists in eyeo Adblock Plus up to version 4.36.2 on Chrome in the legacy Premium activation flow. The flaw involves improper access controls in the postMessage function of the premium.preload.js component, allowing remote manipulation. Exploitation results in issuance of a short-lived trial license for Premium features, but does not grant permanent access. The vendor states this legacy flow is deprecated, the risk is minimal, and no large-scale exploitation is known.