TI-2025-42932 CVE-2025-69771 · GHSA-47p7-hmcr-q3rrCross-Site Scripting (XSS) vulnerability in the subtitle loading function of the…Priority HIGH 76Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers to execute arbitrary JavaScript in the context of the active streaming platform…CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00377 · Published 2026-02-25 · No fix listed CWE-434