Craftsman - match 3 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Craftsman - match 3 published at the 'play' market has multiple vulnerabilities...

craftsman.com XSS vulnerability

Vulnerable URL: http://www.craftsman.com/hand-tools-hammers-striking-tools/b-1305415?subCatView=true'-alert/XSSPOSED/-'=CmgNavHand Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...