Read Time:9 Second

Masato Kinugawa discovered that Thunderbird did not properly validate the
CSP policy in the Web Compatibility extension. An attacker could
potentially exploit this issue to perform a cross-site scripting attack.

Read More