A vulnerability has been found in Alaev SEO Tools Extension up to 1.0.10 on Chrome and classified as problematic. This impacts the function
addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting.
This vulnerability is identified as CVE-2026-19988. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
