CVE 6.1 MEDIUM

GeniexWebView XSS in com.transsion.aiassistantlifestyle_CVE-2026-10510

6.1 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.

Basic Information

ID CVE-2026-10510
Source TECNOMobile
Published Jun 2, 2026 at 01:56
Modified Jun 2, 2026 at 13:35

Affected Product

Vendor TECNO Mobile
Product com.transsion.aiassistantlifestyle
Version v1.3.0.002
Affected Versions TECNO Mobile com.transsion.aiassistantlifestyle v1.3.0.002

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.