writeups.xyz / Universal Code Execution by Chaining Messages in Browser Extensions

Submitter : c2a

Date: 7 July 2024

Bounty : undisclosed

Vulnerabilities :

• Universal XSS
• SOP Bypass
• PostMessage
• RCE
• Browser Extension Hacking

Programs :

• Undisclosed

Authors :

• Eugene Lim (@Spaceraccoonsec)

Link :
https://spaceraccoon.dev/universal-code-execution-browser-extensions/