CVE-2016-8505

Vulnerability summary (CVE-2016-8505) : A cross-site scripting flaw in Yandex Browser for desktop, specifically in BookReader, affects versions prior to 16.6. A remote attacker could execute arbitrary JavaScript in the context of BookReader. The issue is tied to the BookReader component of Yandex...