Researchers have discovered a serious cross-site scripting (XSS) vulnerability affecting all desktop versions of Edward Snowden’s favourite security application, Signal.

https://nakedsecurity.sophos.com/2018/05/16/serious-xss-vulnerability-discovered-in-signal/