CVE-2018-10000

https://notcve.org/view.php?id=CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS (UXSS) via vectors related to a link64_msgAddLinks event. La extensión profesional Video Downloader, en versiones anteriores al 2018-04-04 para Chrome, tienen Cross-Site Scripting Universal (UXSS) mediante vectores relacionados con un evento link64_msgAddLinks. • https://bugs.chromium.org/p/project-zero/issues/detail?id=1555 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •