EDB-48295

PoC

WhatsApp Desktop 0.3.9308 - Persistent Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Gal Weizmanpublished 2020-04-06catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-18426US	high8.2OT critical	67.9% (99th)	KEV	2020-01-21
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Ex…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.