3H34N

1 exploit Active since Oct 2019
CVE-2019-17220 EXPLOITDB MEDIUM text WORKING POC
Rocket.Chat < 2.1.0 - Cross-Site Scripting via Markdown Image URL
Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.
CVSS 6.1