VYPR

Tweb

by Morethanwords

Source repositories

CVEs (2)

  • CVE-2024-33905MedApr 29, 2024
    risk 0.30cvss 4.6epss 0.00

    In Telegram WebK before 2.0.0 (488), a crafted Mini Web App allows XSS via the postMessage web_app_open_link event type.

  • CVE-2021-37596Jul 27, 2021
    risk 0.00cvss epss 0.00

    Telegram Web K Alpha 0.6.1 allows XSS via a document name.