vulnerable browser extension