Malicious Markup Hidden in Messages Can Expose Archived Conversations

Security researchers Denis and Aleksander Rostilov of ExPatch discovered a stored cross-site scripting vulnerability in the HTML export functionality of Telegram Desktop. The issue allowed malicious JavaScript to be embedded in a message and executed later when an exported conversation was opened in a browser.

🔗 Read More