CVE-2018-13879: Improper Neutralization of Input During Web Page Generation

A reflected XSS issue was discovered in the registration form in Rocket.Chat before 0.66. When one creates an account, the next step will ask for a username. This field will not save HTML control characters but an error will be displayed that shows the attempted username unescaped via...

PT-2018-12247

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 0.66 Description A reflected XSS issue was found in the registration form. When creating an account, the username field does not save HTML control characters, but an error message displays the attempted username...