6.1
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.
Basic Information
ID
CVE-2026-10510
Source
TECNOMobile
Published
Jun 2, 2026 at 01:56
Modified
Jun 2, 2026 at 13:35
Affected Product
Vendor
TECNO Mobile
Product
com.transsion.aiassistantlifestyle
Version
v1.3.0.002
Affected Versions
TECNO Mobile com.transsion.aiassistantlifestyle v1.3.0.002