4 matches found
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
5.4CVSS0.00389EPSS
SaveExploits0References3
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross Site Scripting XSS via the replaceemojiwithtext function in uiutil.ts...
6AI score0.00389EPSS
SaveExploits0References3
CVE-2024-36625
Zulip 8.3 is vulnerable to Cross-Site Scripting (XSS) through the replace_emoji_with_text function in ui_util.ts. The Red Hat, NVD, OSV, CIRCL, CNNVD, CVE.org, and PT Security entries consistently describe this XSS vector involving the emoji replacement logic, but do not provide a tested exploit ...
5.4CVSS5.8AI score0.00389EPSS
SaveExploits0References3Affected Software1
20