Mattermost Cross-Site Scripting Vulnerability (CNVD-2024-14306)

Mattermost is an open-source collaboration platform from Mattermost, Inc. in the U.S. Matter is a unified, open-source application-layer connectivity standard designed to enable developers and device manufacturers to connect and build reliable, secure ecosystems and improve compatibility between connected home devices. Mattermost suffers from a cross-site scripting vulnerability that stems from an inability to escape user-controlled output pages, which can be exploited by an attacker to perform a reflective cross-site scripting attack.