CVSS 3.1
9.6 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HCVE-2023-21516
Critical (9.6) in samsung galaxy store. EPSS 0.5% chance of exploitation in the next 30 days.
XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- samsung:galaxy_store