Microsoft Teams security vulnerability left users open to XSS via flawed stickers feature

Attackers could abuse the popular sticker feature in Microsoft Teams to conduct XSS attacks. When a sticker is sent via Teams, the platform converts it into an image and uploads the content as ‘RichText/HTML’ in the subsequent message.