Can XSS be on native mobile apps?

Question

I was thinking that, theire are some web apps that communicates with native mobile apps, like intagram I can send a message to my friend from the web apps and he'll receive it in his mobile app, so if instagram was vulnurable to XSS, can it effect mobile users?

Answer 1

Quite a short answer: yes!

There are always some possibilities for such actions, just look at the log4j apocalypse last month this is basically a trivial way to XSS many programs. So, yes if any of these apps is vulnerable to such attacks this is a absolutely a possible way.

Cheers