CVE-2026-47430 - Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews
CVE ID :CVE-2026-47430 Published : June 8, 2026, 12:16 p.m. | 58 minutes ago Description :## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `commandDelegate sendPluginResult:callbackId:` with no format validation...