I am trying to do a security evaluation of an android application. I came across a situation where one of the activities of the app displays certain form fields in a webview.
This form is very straight forward vulnerable to a reflected XSS. An attack vector as simple as
"><script>alert(1);</script><div is a sufficient PoC.
Now in traditional web applications I understand the impact that a potential reflected XSS (like the above) may have and that there are a dozen exploit techniques there, including BeeF etc.
However, I am unable to evaluate the impact of such a bug in the former case (Android WebView). Specifically, since the form is rendered within the web view of the app and given that the app has no open ends where other apps could interact with it through intents etc., what could be a possible way an attacker might use to exploit this reflected XSS.
Just passing on a hyperlink through some social engineering, won't really work I guess. Because, even if the potential victim opens up the link in his mobile browser, the browser would be a completely different app altogether, having no gateway to interact with our vulnerable app in question, isn't it ?
Now just for the sake of this being a security vuln, I do not want to ride on top of the dev to get it fixed(I have been a dev, so I can empathize :)). But from a security perspective, I certainly want to get it fixed :P and so I am looking out for an exploit scenario.
Any answers/pointers appreciated.