CVE-2023-3481

MediumCVSS 5.7

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Critters versions 0.0.17-0.0.19 have an issue when parsing HTML, which leads to a potential cross-site scripting (XSS) vulnerability.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or other unauthorized actions.

Recommendation

It is recommended to upgrade to version 0.0.20 of the extension to mitigate this vulnerability.

Original NVD description (English source)

Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to version 0.0.20 of the extension.