CVE-2015-7772: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different...

PT-2015-7601

Name of the Vulnerable Software and Affected Versions Newphoria applican framework versions prior to 1.13.0 Description A cross-site scripting XSS issue exists in the runtime engine of the Newphoria applican framework, allowing remote attackers to inject arbitrary web script or HTML via a crafted...