description: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.
problem types: Processing maliciously crafted web content may lead to a cross site scripting attack
affected:
{
product: iOS
vendor: Apple
versions:
lessThan: iOS 13.4 and iPadOS 13.4, status: affected, version: unspecified, versionType: custom
}
{
product: tvOS
vendor: Apple
versions:
lessThan: tvOS 13.4, status: affected, version: unspecified, versionType: custom
}
{
product: Safari
vendor: Apple
versions:
lessThan: Safari 13.1, status: affected, version: unspecified, versionType: custom
}
{
product: iTunes for Windows
vendor: Apple
versions:
lessThan: iTunes for Windows 12.10.5, status: affected, version: unspecified, versionType: custom
}
{
product: iCloud for Windows
vendor: Apple
versions:
lessThan: iCloud for Windows 10.9.3, status: affected, version: unspecified, versionType: custom
}
{
product: iCloud for Windows (Legacy)
vendor: Apple
versions:
lessThan: iCloud for Windows 7.18, status: affected, version: unspecified, versionType: custom
}
