| Package | Affected versions | Patched versions |
|---|---|---|
| grammarly | = 2018-02-02 |
The Grammarly extension before 2018-02-02 for Chrome allows remote attackers to discover authentication tokens via an 'action: "user"' request to iframe.gr_-ifr, because the exposure of these tokens is not restricted to any specific web site.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free