VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities

T1Covered by 1 source · first reported by CERT/CC at 25 Sept, 16:25 UTC

Overview Three cross-site scripting (XSS) vulnerabilities identified in Readwise Reader for Android version 8.7.2 are disclosed. An attacker with the ability to craft malicious documents or metadata can exploit these vulnerabilities by supplying poisoned content that bypasses sanitization…