7 matches found
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36624: Improper Neutralization of Input During Web Page Generation
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36624
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the constructcopydiv function in copyandpaste.js...
CVE-2024-36624
Zulip version 8.3 is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input within the construct_copy_div function located in the copy_and_paste.js file. This flaw could allow for the execution of malicious scripts in a user's browser. As a temporary workaround, it i...