CVE-2016-4783: XSS
Published May 23, 2016
·Updated
Cross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS (UXSS)."
Affected Software
2 affected components
Google Android=4.3.1
Lenovo Shareit Android=3.5.98_ww
Event History
May 23, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4783?
CVE-2016-4783 has a moderate severity level due to its ability to allow cross-site scripting attacks.
2
How do I fix CVE-2016-4783?
To fix CVE-2016-4783, update Lenovo SHAREit to version 3.5.98_ww or later.
3
Which versions of SHAREit are affected by CVE-2016-4783?
CVE-2016-4783 affects all versions of Lenovo SHAREit prior to 3.5.98_ww.
4
What type of vulnerability is CVE-2016-4783?
CVE-2016-4783 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2016-4783 be exploited remotely?
Yes, CVE-2016-4783 can be exploited remotely by attackers to inject malicious scripts.