Skip to content
OpenAdvisories

Product · Discourse

discourse-calendar

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2023-43658

    Improper escaping of user input in discourse-calendar

    dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Improper escaping of event titles could lead to Cross-site Scripting (XSS) within the 'email preview' UI when …

    Discourse discourse-calendar