CVE-2026-10510

CVE-2026-10510: GeniexWebView XSS in com.transsion.aiassistantlifestyle

Vendor Tecno Mobile
Product com.transsion.aiassistantlifestyle
Weakness CWE-79 · XSS
Published June 2, 2026
Last update June 2, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aiassistantlifestyle) all versions on Android allows remote attacker to execute arbitrary JavaScript in the WebView context via crafted web_action_data URL parameter.

Key dates

02Disclosure timeline

June 2, 2026 CVE published
June 2, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-37514 WordPress CopySafe Web Protection plugin <= 3.14 - Cross Site Scripting (XSS) vulnerability CVE-2024-5763 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget CVE-2025-53516 CVE-2025-59990 Junos Space: Template creation pages are vulnerable to reflected cross-site script injection CVE-2021-24419 WP YouTube Lyte < 1.7.16 - Authenticated Stored XSS