Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.92%
Published
Dec 25, 2014
Modified
May 6, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.
Weaknesses (CWE)
Affected Products (1)
References (4)