TI-2019-09217 CVE-2019-12368 · GHSA-q34g-55f9-m6mjThe Edison Mail application through 1.7.1 for Android allows XSS via an event attribute…Priority LOW 29The Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00968 · Published 2020-03-18 · No fix listed CWE-79