CVE-2025-45662

The mpgram-web lightweight Telegram web client (specifically commit 94baadb ) is vulnerable to a cross-site scripting (XSS) flaw in the /master/login.php component. This vulnerability allows an attacker to execute arbitrary Javascript within a user's browser by providing a crafted payload . To mi...