Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.

Info

CVECVE-2026-77115

First seen2026-08-23 08:30 UTC

Disclosed2026-08-23 06:17 UTC

Last updated2026-08-23 08:30 UTC

Channel statusauto

Summary

Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).