CVE-2020-10935
Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.
Published: 2020-04-20 · CVSS: Unscored
Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7