CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

CVE-2025-55996

creationtimestamp| type| source ---|---|--- 2025-09-12 04:26:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51229 2025-09-12 04:27:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51230 2025-09-12 09:00:05+00:00| published-proof-of-concept|...

CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

CVE-2025-55996

Viber Desktop 25.6.0 is affected by a HTML Injection vulnerability caused by improper handling of the text parameter in the message compose/forward interface. The issue can be triggered via the text field and has a CVSSv3.1 base score of 6.3 (Medium) with NETWORK attack vector, requiring user int...