Exploiting extensions vulnerabilities from web pages and other extensions