Summary A Stored XSS vulnerability was identified in Genspark’s AI Chat feature. By crafting a specific prompt, an attacker can cause the AI to generate malicious HTML that is rendered directly int...

Summary A DOM-based XSS vulnerability was identified in the default “Dictionary & Translate” (Từ điển và Dịch) extension bundled with Cốc Cốc browser. When a user highlights text containing HTM...