CVE-2021-3866: Zulip

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6.

Affected products

• Zulip Zulip: up to and including 4.8

Published 2022-01-20. Last modified 2026-06-17.