Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.

Published Apr 20, 2020 · Updated Aug 4, 2024 · Assigned by mitre