description: A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.
problem types: Information Disclosure
affected:
{
product: Cordova
vendor: Apache
versions:
status: affected, version: Cordova Android applications using the InAppBrowser plugin ( cordova-plugin-inappbrowser version 3.0.0 and below )
}