Rocket.Chat Cross-Site Scripting Vulnerability

Rocket.Chat is an open source built in JavaScript using the Meteor fullstack framework developed by the Web chat server . A cross-site scripting vulnerability exists in the packages/rocketchat-mentions/Mentions.js file in versions of Rocket.Chat prior to 0.65, which stems from the program's failu...