4 matches found
CVE-2020-8288
The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting XSS vulnerability by way of the value parameter...
CVE-2020-8288
The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting XSS vulnerability by way of the value parameter...
Cross site scripting
The specializedRendering function in Rocket.Chat server before 3.9.2 allows a cross-site scripting XSS vulnerability by way of the value parameter...
CVE-2020-8288
Summary: CVE-2020-8288 affects Rocket.Chat server prior to 3.9.2 where the specializedRendering function processes the value parameter, enabling cross-site scripting (XSS). Affected software: Rocket.Chat server (version