writeups.xyz / Xiaomi Execute Arbitrary JavaScript

Submitter : c2a

Date: 13 January 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• HTML Injection
• Android

Programs :

• Xiaomi

Authors :

• Neil Mark Ochea (@Nmochea)

Link :
https://nmochea.medium.com/xiaomi-arbitrary-javascript-vulnerability-327a6f3a9b0e