CVE-2018-9990

CVE-2018-9990

In Zulip Server versions before 1.7.2, there was an XSS issue with stream names in topic typeahead.

Source: CVE-2018-9990