4 matches found
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross-Site Scripting (XSS) through the replace_emoji_with_text function in ui_util.ts. The Red Hat, NVD, OSV, CIRCL, CNNVD, CVE.org, and PT Security entries consistently describe this XSS vector involving the emoji replacement logic, but do not provide a tested exploit ...