WhatsApp XSS vulnerability can be misused for Spreading Malware
Little Insight:
[ According to FACEBOOK, This XSS could take advantage of the known domain to make phishing attacks easier or can be misused for Spreading Malware
]
Reward For Whatsapp XSS Vulnerability : 1000$
My Finding....
Domain: https://www.whatsapp.com
Poc url :
but you can think a little different
How this can be used to trick users to download a fake application (Malware - WhatsApp.apk) from other domain and easily can spreading malware..
More Information
The vulnerability mentioned here has been confirmed patched by the Facebook Security Team.
