Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment.
Weakness
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
References