PT-2026-5573
CVE-2022-50952
·
Published
2026-02-01
·
Updated
2026-02-01
Description by
CVSS 3.1
6.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Banco Guayaquil versions 8.0.0
Description
The Banco Guayaquil mobile iOS application version 8.0.0 has a persistent cross-site scripting issue in the TextBox Name Profile input. An attacker can inject malicious script code via a POST request, which will execute when the application is reviewed, without requiring user interaction.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾