CVE-2026-47430

CVE-2026-47430

## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate sendPluginResult:callbackId:` with no format validation (`CDVWKInAppBrowser.m:560–574`). Any web co…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

Weakness classification (CWE)

References