{"id":"CVE-2021-37518","details":"Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.","modified":"2026-07-09T01:25:51.269858Z","published":"2023-02-03T18:15:13.950Z","references":[{"type":"ADVISORY","url":"https://github.com/philc/vimium/pull/3850"},{"type":"EVIDENCE","url":"https://github.com/philc/vimium/issues/3832"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/philc/vimium","events":[{"introduced":"0"},{"last_affected":"528a2bdc4e5716f02889eb3fdef0f96f3da08a0a"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.66"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:vimium_project:vimium:*:*:*:*:*:*:*:*"}}],"versions":["v1.66","v1.65","1.64.6","v1.64.4","v1.64.3","v1.64.2","v1.64.1","v1.64","v1.63.3","v1.63.1","v1.63","v1.62.4","v1.62.2","v1.62","v1.61.1","v1.61","v1.60.3","v1.60.2","v1.60.1","v1.60","v1.59","v1.58.2","v1.58.1","v1.58","v1.57"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37518.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}