CVE-2019-14760: An issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to HTML and JavaScript inject

KaiOS 2.5's pre-installed Recorder app has a vulnerability allowing HTML and JavaScript injection (inserting malicious code into a web application), where a local attacker (someone with access to the device) can inject harmful code to take over the app's interface or trick users into revealing credentials.