Extension vulnerability