Rogue websites can turn vulnerable browser extensions into back doors

A researcher has found that websites can use some extensions to bypass security policies, execute code, and even install other extensions.