← Database

CVE-2024-47048

MEDIUM CVSS: 5.4 Published: 2024-09-25 Modified: 2026-06-17

Description

Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.

Affected Platforms

Rocket.Chat Rocket.Chat

Weakness Type

CWE-79, CWE-79

References