CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

CVE-2024-36625

Zulip version 8.3 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input within the replace_emoji_with_text function located in ui_util.ts. An attacker could exploit this flaw to execute malicious scripts in the context of the user's browser. As a temporary workaround...

CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

CVE-2024-36625

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...

CVE-2024-36625: Improper Neutralization of Input During Web Page Generation

Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...