Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2022-50952

Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name Input

Description

Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Banco de Guayaquil Banco Guayaquil

Default version status: unaffected

  • 8.0.0affected

References