CVE-2026-19988

Name of the Vulnerable Software and Affected Versions Alaev SEO Tools Extension versions prior to 1.0.11

Description A remote cross-site scripting issue exists in the Popup UI component within the src/popup.html file. The flaw is located in the addDiv() function, where improper manipulation allows an attacker to execute malicious scripts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the addDiv() function in the src/popup.html file to minimize the risk of exploitation.