Threats tagged 'ghsa-g8qr-vqpc-qjpw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.6	EPSS 0.5%	CVE-2026-13461 · When coupled with the SSL bypass vulnerability, JavaScript can be injected into a WebView in the Critical9.6EPSS 0.5%2026-07-09GCVE Database When coupled with the SSL bypass vulnerability, JavaScript can be injected into a WebView in the PayRange version 7.0.7 app. The injection of specific JavaScript function calls allows the attacker to escape the WebView sandbox and perform a number of dangerous actions on the user's device. EPSS 0.5%Vulnerability #ghsa-g8qr-vqpc-qjpw	GCVE Database	2026-07-09

Page 1 of 1