Post #8096 131 Sep 18, 2026, 08:04 UTC 🔗 Ссылка:https://expatch.com/writeups/telegram-html-export-xss.html Expatch The Ghost in the Chat: stored XSS in Telegram Desktop HTML export - ExPatch Stored XSS in Telegram Desktop's HTML export: a bot that never joins your group plants invisible JavaScript in an inline keyboard button; the payload detonates when a participant opens the exported file. Fixed in v6.9.4/v7.0.1; CVE-2026-94488. Analysis by…