Cordova Inappbrowser (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2026-06-08. Vendor: Apache.

CVEs of Cordova Inappbrowser

• CVE-2026-47430 - CVSS 9.5 (critical), 2026-06-08: ## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate…
• CVE-2019-0219 - CVSS 9.8 (critical), 2020-01-14: A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted…