CVE-2017-8178

Huawei Email APP on Vicky-AL00 smartphones is affected by a stored XSS vulnerability in versions earlier than VKY-AL00C00B171. A remote attacker could send an email containing malicious script and trigger execution when a user opens the email. The issue arises from insufficient verification of pa...