A Cross-Site Scripting (XSS) vulnerability exists in the Brave browser's brave-popup-builder component due to improper neutralization of script-related HTML tags. This vulnerability allows code injection. It affects Brave versions up to 0.8.8. The vulnerability has a medium severity with a CVSS score of 5.3. No known exploits in the wild or patches are currently documented.