VULNERABILITY INTELLIGENCE

CVE-2024-36624

CVSS score5.4 MEDIUM

EPSS probability0.39%

CISA KEVNot currently listed

Published2024-11-29

Last modified2026-06-17

Description

Zulip 8.3 is vulnerable to Cross Site Scripting (XSS) via the construct_copy_div function in copy_and_paste.js.