CVE-2022-3877

Name of the Vulnerable Software and Affected Versions Click Studios Passwordstate (affected versions not specified) Click Studios Passwordstate Browser Extension Chrome (affected versions not specified)

Description A problematic vulnerability was found in the component URL Field Handler of Click Studios Passwordstate and Passwordstate Browser Extension Chrome. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations Upgrade the affected component to a newer version. As a temporary workaround, consider restricting access to the URL Field Handler component until a patch is available. Avoid using the vulnerable URL Field Handler component in Click Studios Passwordstate and Passwordstate Browser Extension Chrome until the issue is resolved.