Record summary

CVE-2019-17220 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBRocket.Chat 2.1.0 - Cross-Site ScriptingExploitDB exploitby 3H34NNot analyzed1 file
ExploitDB

PoC details

References

5