Alfred-spotify-mini-player Alfred Spotify Mini Player — known CVE vulnerabilities

Every CVE whose affected-product data names Alfred-spotify-mini-player Alfred Spotify Mini Player, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2021-40927 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary…