Description
A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Repetico | web backend | ≤ 2026-06-30 | — |