Is Cdisount recherche par image safe?
Cdisount image search accepts forged page messages that trigger image uploads and tab opening.
This image-search shopping extension injects a content script on all http and https pages that listens for page messages without checking their origin. Any website that knows the shipped sender constant can make the extension fetch an image URL it chooses and upload it to an image-search backend, or open tabs and windows it chooses. The same message bridge appears in other builds of the AliPrice code base.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itJim - 11 other listings from the same operator, 1 of them carrying a finding
Jim - 11 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
11 other listings published from this account, 2k+ users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Cdisount recherche par image contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.aiprice.com
Cdisount recherche par image sends data to api.aiprice.com. 24 other extensions we have analysed send data here.