WS-2023-0203

A Cross-Site scripting XSS vulnerability was found in Brave Software on Brave Today through custom RSS feed. It allows an attacker to add any RSS feed to Brave Today, and the registered feed entries are shown in a tab with a hyperlink to the original article URL. Then, Brave iOS doesn't restrict...