
Telegram Desktop XSS Vulnerability Lets Attackers Steal Entire Chat Histories
Stored XSS in Telegram Desktop HTML chat exports (CVSS 8.2) could let attacker-controlled inline keyboard buttons steal full chat histories.
1
2 stories, newest first · one card per story

Stored XSS in Telegram Desktop HTML chat exports (CVSS 8.2) could let attacker-controlled inline keyboard buttons steal full chat histories.

Telegram Desktop XSS in bot inline keyboard buttons let attackers steal chat content from exported HTML archives; patched in 7.0.1.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views