Threats tagged 'ghsa-xp3v-wvpf-cjp5'

A security vulnerability (CVE-2026-82811) exists in Toggl OÜ Toggl Track Extension version 4.11.16. The flaw involves an origin validation error in the postMessage handler component, which can be exploited remotely. The vulnerability has a medium severity score of 5.4 and has been publicly disclosed. The vendor was notified but has not responded or provided a patch. No known exploits are currently active in the wild.