Medium severity6.1NVD Advisory· Published Jun 2, 2026· Updated Jun 2, 2026

CVE-2026-10510

Description

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.

Affected products

Transsion/AI Assistant Lifestylellm-fuzzy
Range: all versions

Patches

Vulnerability mechanics

References

security.tecno.com/SRC/securityUpdatesnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000