medium5.4
CVE-2024-47048
Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.
Impact
Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocket.Chat | Rocket.Chat | before 6.7.9 from 6.8.0 before 6.8.7 from 6.9.0 before 6.9.7 from 6.10.0 before 6.10.6 from 6.11.0 before 6.11.3 Version 6.12.0 |