CVE-2024-33905

CVE-2024-33905 · Severity

In Telegram WebK before 2.0.0 (488), a crafted Mini Web App allows XSS via the postMessage web_app_open_link event type.

Learn more about our Web App Pen Testing.