Apache Cordova — CWE-79

All Frameworks › Apache Cordova › CWE-79

1 CVEs categorized as CWE-79 — Cross-site Scripting (XSS) in Apache Cordova.

CVE-2023-2507CRITICAL2023

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them.