WhatsApp Cross-Site Scripting Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 23/05/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
< 0.3.9309< 2.20.10 | 0.3.93092.20.10 |
A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free