What’s Vulnerable › Vulnerabilities

CVE-2022-43363

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-12-06 · updated 2026-06-17
• Weakness: CWE-79

Description

Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties have been unable to discern any relationship between the Pastebin information and a possible XSS finding.

Affected products

• Telegram: 15.3.1

References

• https://bugs.telegram.org/c/17831
• https://pastebin.com/72MRwNXW
• https://bugs.telegram.org/c/17831
• https://pastebin.com/72MRwNXW

Get alerted when CVE-2022-43363 or the next vulnerability affects your stack