Clicking on the contact card instantly downloads a file that immediately runs on the computer in use.
WhatsApp Web users should update their software before using it so that the vulnerability is not used against them.
WhatsApp Web v0.1.4481 and later include the fix for this vulnerability.
source: www.techworm.net