medium6.1
CVE-2020-24582
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
Impact
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zulipchat | Zulip Desktop | before 5.4.3 |