TI-2019-09214 CVE-2019-12365 · GHSA-f826-cggx-hr6fThe Newton application through 10.0.23 for Android allows XSS via an event attribute and…Priority LOW 29The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00989 · Published 2020-03-18 · No fix listed CWE-79