Skip to content
OpenAdvisories

Product · Discourse

discourse-ai

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-54142

    Cross-site Scripting via Discourse-ai SharedAiConversation onebox in Discourse

    Discourse AI is a Discourse plugin which provides a number of AI features. When sharing Discourse AI Bot conversations into posts, if the conversation had HTML entities those could leak into the Discourse application when a user visited a post with a onebox t…

    Discourse discourse-ai