Broad Host Permissions

Flags items that declare overly broad host access patterns, enabling interaction with all websites. This level of access can be exploited to inject scripts into trusted sites and increases the risk of sensitive data exposure, cross-site surveillance, and credential harvesting.

Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

Unmaintained Item

Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.

API Permissions

storage

Enables persistent data storage for the extension, potentially storing large amounts of user-related information.

printerProvider

Allows implementing a custom printing solution, potentially accessing document content being printed.

sidePanel

Allows creation and management of browser side panel content, displaying custom interfaces alongside web pages.

Chrome Runtime Properties

chrome.runtime.onMessage

chrome.runtime.sendMessage

Vulnerabilities

GHSA-vc8w-jr9v-vj7f

Bootstrap Cross-Site Scripting (XSS) vulnerability

CVSS:

6.4

Dependencies

  • bootstrap
    Version: 4.6.0
    License: MIT

  • jquery
    Version: 3.6.0
    License: MIT

Licensing

All licenses and compliance documentation are available for Enterprise users.