Archive
25 June 2022
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Critical 9.6
Cross Site Scripting in Wire Messages
Wire is a secure messaging application. Wire is vulnerable to arbitrary HTML and Javascript execution via insufficient escaping when rendering `@mentions` in the wire-webapp. If a user receives and views a malicious message, arbitrary code is injected and exe…