Medium severity6.1NVD Advisory· Published Oct 1, 2021· Updated Jun 17, 2026
CVE-2021-40927
CVE-2021-40927
Description
Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=0.13.9
- Range: <=0.13.9
- Spotify-for-Alfred/Spotify-for-Alfreddescription
- cpe:2.3:a:alfred-spotify-mini-player:alfred_spotify_mini_player:*:*:*:*:*:*:*:*Range: <=0.13.9
Patches
Vulnerability mechanics
References
1- github.com/citelao/Spotify-for-Alfred/issues/137nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.