Skip to content
OpenAdvisories

Product · Discourse

discourse-bbcode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-46162

    Discourse BBCode plugin vulnerable to arbitrary CSS injection

    discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin inst…

    Discourse discourse-bbcode