CVE-2018-12587: German Spelling Dictionary Project German Spelling Dictionary

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar.

Affected products

• German Spelling Dictionary Project German Spelling Dictionary: version 1.3 only

Published 2018-08-13. Last modified 2026-06-17.