Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

Researchers discovered a flaw in Opera GX that allowed malicious websites to silently install browser add-ons to steal data from visited pages. A proof of concept demonstrated extracting a user's Gmail address from a single visit without user interaction. Opera has patched the vulnerability and found no evidence of exploitation.