Miraikan Assist App Ios Version
Monthly
Cross-site scripting in the Miraikan Assist App (Android < 1.1.7, iOS < 1.0.7) enables remote attackers to inject and execute arbitrary JavaScript within the app's embedded WebView component when a user interacts with attacker-controlled content. The scope change in the CVSS vector (S:C) reflects that execution occurs across origin boundaries within the WebView context, enabling content manipulation beyond the app's own domain. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; patch is confirmed available from the vendor.
Cross-site scripting in the Miraikan Assist App (Android < 1.1.7, iOS < 1.0.7) enables remote attackers to inject and execute arbitrary JavaScript within the app's embedded WebView component when a user interacts with attacker-controlled content. The scope change in the CVSS vector (S:C) reflects that execution occurs across origin boundaries within the WebView context, enabling content manipulation beyond the app's own domain. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis; patch is confirmed available from the vendor.