TI-2019-09219 CVE-2019-12370 · GHSA-5ppm-837r-7xc2The Spark application through 2.0.2 for Android allows XSS via an event attribute and…Priority LOW 30The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0113 · Published 2020-03-18 · No fix listed CWE-79