Medium severity6.1NVD Advisory· Published Jul 13, 2022· Updated Jun 17, 2026
CVE-2022-32308
CVE-2022-32308
Description
Cross Site Scripting (XSS) vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process.
Affected products
3- cpe:2.3:a:ublock_origin_project:ublock_origin:*:*:*:*:*:*:*:*Range: <1.41.1
- uBlock Origin/uBlock Origindescription
- Range: <1.41.1
Patches
Vulnerability mechanics
References
1- github.com/uBlockOrigin/uBlock-issues/issues/1992nvdIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.