CVE-2019-12366
The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAG…
Published: 2020-03-18 · CVSS: Unscored
The Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7