CVE-2012-2648

https://notcve.org/view.php?id=CVE-2012-2648

07 Aug 2012 — Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser. vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la app GoodReader v3.16 y anteriores para iOS en iPad, y v3.15.1 y anteriores para IOS en iPhone e iPod touch, permite a atacantes r... • http://jvn.jp/en/jp/JVN01598734/index.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •