CVE-2018-12587

A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar.

• CWE-79

• https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txtThird Party Advisory
• https://www.openbugbounty.org/reports/610381/Third Party Advisory
• https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txtThird Party Advisory
• https://www.openbugbounty.org/reports/610381/Third Party Advisory

Published

Aug 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12580library/DBTech/Security/Action/Sessions.php in DragonByte vB…
• CVE-2018-12581An issue was discovered in js/designer/move.js in phpMyAdmin…
• CVE-2018-12582An issue was discovered in AKCMS 6.1. CSRF can add an admin …
• CVE-2018-12583An issue was discovered in AKCMS 6.1. CSRF can delete an art…
• CVE-2018-12584The ConnectionBase::preparseNewBytes function in resip/stack…9.8
• CVE-2018-12585An XXE vulnerability in the OPC UA Java and .NET Legacy Stac…
• CVE-2018-12588Cross-site scripting (XSS) vulnerability in templates/fronte…
• CVE-2018-12589Polaris Office 2017 8.1 allows attackers to execute arbitrar…
• CVE-2018-1259Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 …7.5
• CVE-2018-12590Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer …7.2
• CVE-2018-12591Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer …
• CVE-2018-12592Polycom RealPresence Web Suite before 2.2.0 does not block a…