A vulnerability with parental control app Canopy allows attackers to plant JavaScript into the parent portal and gain access to all the features a parent would have with their child’s device.