Description (CNA)
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Banco de Guayaquil / Banco Guayaquil | affected 8.0.0 |
CWE
CWE-79
References
- https://www.vulnerability-lab.com/get_content.php?id=2315
- https://apps.apple.com/ec/app/banco-guayaquil/id624963066
- https://www.vulncheck.com/advisories/banco-guayaquil-mobile-ios-cross-site-scripting-via-profile-name-input
ADP enrichment
No English description supplied.
No references supplied.