Skip to content
OpenAdvisories

Vendor

Joyland

6 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.3

    Joyland AI WebView command injection

    Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access ap…