Medium severity6.1NVD Advisory· Published Jan 31, 2019· Updated Jun 17, 2026
CVE-2019-7250
CVE-2019-7250
Description
An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
1- github.com/davidrthorn/cross_reference/issues/32nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.