CVE-2020-9445

Zulip Server before 2.1.3 allows XSS via the modallink feature in the Markdown functionality...

CVE-2020-9445

CVE-2020-9445 affects Zulip Server versions prior to 2.1.3. The issue is a cross-site scripting vulnerability exploitable via the modal_link feature in the Markdown functionality, caused by insufficient validation of client-side data by the web application. Impact is XSS, with the practical conse...