CVE-2019-11928

An input validation issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed cross-site scripting upon clicking on a link from a specially crafted live location message.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve-assign@fb.com

Published

2020-09-03

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Whatsapp Desktop (Facebook)
• Whatsapp Desktop (Whatsapp)

References

• https://www.whatsapp.com/security/advisories/2020/