Vulnerabilities > Zulipchat > Zulip Desktop > 5.2.0

DATE CVE VULNERABILITY TITLE RISK
2020-09-10 CVE-2020-24582 Cross-site Scripting vulnerability in Zulipchat Zulip Desktop
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
network
low complexity
zulipchat CWE-79
6.1