system
Describe <CVE-2021-40927>.
user
What is <CVE-2021-40927>?
assistant
Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter..