https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-7772.htmlhttps://patchthecve.com/cve/CVE-2015-7772.htmlWed, 17 Jun 2026 00:33:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerhttps://patchthecve.com/cve/CVE-2015-7771.htmlhttps://patchthecve.com/cve/CVE-2015-7771.htmlWed, 17 Jun 2026 00:33:06 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-20https://patchthecve.com/cve/CVE-2015-5632.htmlhttps://patchthecve.com/cve/CVE-2015-5632.htmlWed, 17 Jun 2026 00:29:29 +0000MEDIUM 6.8: The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.