Vulnerabilities > Alfred Spotify Mini Player

DATE CVE VULNERABILITY TITLE RISK
2021-10-01 CVE-2021-40927 Cross-site Scripting vulnerability in Alfred-Spotify-Mini-Player Alfred Spotify Mini Player
Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter.
network
low complexity
alfred-spotify-mini-player CWE-79
6.1