Skip to content
OpenAdvisories
Medium · 4.7 CVE-2026-73537 EUVD-2026-63826GHSA-599w-xgxp-wr28

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed i…

Published Aug 21, 2026 · Updated Aug 21, 2026 · Assigned by jpcert

Description

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered.

Affected products

VendorProductAffectedFixed
Japan Science and Technology Agency (JST) Miraikan Assist App Android version < 1.1.7 1.1.7
Japan Science and Technology Agency (JST) Miraikan Assist App iOS version < 1.0.7 1.0.7

References