XSS in Desktop Client in call notification popup