Unscored CVE-2019-11928 EUVD-2019-3586GHSA-m3fj-55xx-478h

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link f…

Published Sep 3, 2020 · Updated Aug 4, 2024 · Assigned by facebook

Vendor: Facebook Product: WhatsApp Desktop

Description

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.

Affected products

Vendor	Product	Affected	Fixed
Facebook	WhatsApp Desktop	0.3.4932, unspecified – < 0.3.4932	0.3.4932

References

https://www.whatsapp.com/security/advisories/2020/