Unrated severityNVD Advisory· Published Nov 20, 2015· Updated Jun 17, 2026
CVE-2015-7771
CVE-2015-7771
Description
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-2015-7772.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:newphoria_corporation:applican:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:newphoria_corporation:applican:*:*:*:*:*:android:*:*range: <=1.12.2
- cpe:2.3:a:newphoria_corporation:applican:*:*:*:*:*:ios:*:*range: <=1.12.1
- Range: < 1.13.0
Patches
Vulnerability mechanics
References
3- jvn.jp/en/jp/JVN71088919/index.htmlnvdVendor Advisory
- jvndb.jvn.jp/jvndb/JVNDB-2015-000178nvdVendor Advisory
- jvn.jp/en/jp/JVN71088919/995707/index.htmlnvd
News mentions
0No linked articles in our index yet.