Google AOSP Email App HTML Injection

Google AOSP email application versions up to 7.0 suffer from an html injection vulnerability.