CVE-2012-2648: Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3....

Security readout for executives and security teams

This is an older mobile-app XSS issue in GoodReader for iOS. If a user runs an affected GoodReader version and uses it with a web browser, malicious web content could cause script or HTML injection inside that workflow. The source bundle does not provide severity scoring, confirmed exploitation, or detailed remediation status. Exposure is most likely limited to legacy iOS devices still running the named GoodReader versions. Modern managed fleets are less likely to be exposed unless old devices or unmanaged personal devices remain in use. Treat as a targeted legacy-technology cleanup item, not an emergency, unless affected GoodReader versions are still used for sensitive business documents. Prioritize inventory confirmation before deeper response work. Mitigation focus: Inventory iOS devices for GoodReader and recorded app versions.; Remove or upgrade affected GoodReader versions where vendor guidance supports it.; Check JVN and GoodReader guidance for the recommended fixed version..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.