CNNVD-202508-823 Information

Aug 09, 2025 cve

CNNVD ID

CNNVD-202508-823

CVE-2025-8751

CNNVD Published: 2025-08-09

Description (Chinese)

Total WebShield Extension是Total WebShield公司的一款增强网络安全性的浏览器扩展程序。 Total WebShield Extension 3.2.0及之前版本存在代码注入漏洞，该漏洞源于参数Category处理不当，可能导致跨站脚本攻击。

Description (English)

Total WebShield Extension is a web-security-enhanced browser extension for Total WebShield. Total WebShield Extension 3.2.0 and previous versions had a code-injection loophole, which stemmed from the fact that the parameter Category had been mistreated and could lead to a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

Total WebShield

Published

2025-08-09

Last Modified

2026-02-24

References

https://news.fmisec.com/self-html-injection-in-total-webshield-chrome-extension#heading-vulnerability-details https://vuldb.com/?ctiid.319245 https://vuldb.com/?id.319245 https://vuldb.com/?submit.623677 https://access.redhat.com/security/cve/cve-2025-8751

Share on: