CVE-2020-24582

Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface...

CVE-2020-24582

Zulip Desktop prior to version 5.4.3 is affected by a cross-site scripting (XSS) vulnerability. The issue arises from mishandled string escaping during the construction of the HTML for the user interface, enabling injection of malicious content in the desktop client. The CVE entry covers this as ...