NetSight
medium6.1

CVE-2020-9445

Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.

Impact

Zulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.

Affected products

VendorProductAffected versions
ZulipZulip Server
before 2.1.3

Weakness classification

References