CVE-2021-37518: Vimium Project Vimium

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.

Affected products

• Vimium Project Vimium: up to and including 1.66

Published 2023-02-03. Last modified 2026-06-17.