Description
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Banco de Guayaquil | Banco Guayaquil | 8.0.0 | — |
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- VulnCheck Advisory: Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name Input third-party-advisory