CVE-2023-2507 — CleverTap Cordova Plugin 2.6.2 - Reflected XSS
CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker.…
Published: 2023-07-15 · CVSS: 9.3 · CVSS 3.1
CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker. This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7