CVE-2024-46962

CRITICAL

Master Video Downloader <2.0 - XSS

Title source: llm
STIX 2.1

Description

The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component.

References (2)

Core 2

Scores

CVSS v3 9.1
EPSS 0.0018
EPSS Percentile 39.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-94
Status published
Published Nov 11, 2024
Tracked Since Feb 18, 2026