CVE

CVE-2019-18426

WhatsApp Cross-Site Scripting Vulnerability

Meta Platforms · WhatsApp

Date added (CISA)

2022-05-23

Remediation due

2022-06-13

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.