{"id":"CVE-2019-18426","vendor_project":"Meta Platforms","product":"WhatsApp","vulnerability_name":"WhatsApp Cross-Site Scripting Vulnerability","date_added":"2022-05-23","due_date":"2022-06-13","known_ransomware_use":"Unknown","short_description":"A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-79","cvss_version":"3.1","cvss_severity":"HIGH","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","nvd_published":"2020-01-21","nvd_status":"Analyzed","epss":0.67859,"epss_percentile":0.99288,"cvss_score":8.2,"days_published_to_kev":853,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2019-18426","by":"CyberMax"}