Cordova In-App- Extension Arbitrary JavaScript Execution

The vulnerability of the Cordova In-App-Browser extension for Android relates to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code using a specially crafted URI containing the “gap-iab:“ scheme...