CVE-2019-25084 – Hide Files on GitHub options.js addEventListener cross site scripting

https://notcve.org/view.php?id=CVE-2019-25084

25 Dec 2022 — A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.0.0 is able to address this issue. • https://github.com/sindresorhus/hide-files-on-github/commit/9de0c57df81db1178e0e79431d462f6d9842742e • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •