PT-2020-9595

Name of the Vulnerable Software and Affected Versions: KaiOS versions 2.5 through 2.5.1 Description: An issue was discovered in the pre-installed Contacts application, which is vulnerable to HTML and JavaScript injection attacks. An attacker can send a vCard file to the victim, injecting HTML int...