description: Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page.
problem types: Insufficient validation of untrusted input
affected:
{
product: Chrome
vendor: Google
versions:
lessThan: 104.0.5112.79, status: affected, version: unspecified, versionType: custom
}