| Package | Affected versions | Patched versions |
|---|---|---|
| zulip desktop | < 5.4.3 | 5.4.3 |
Zulip Desktop before 5.4.3 allows XSS because string escaping is mishandled during composition of the HTML for the user interface.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free