Skip to content
OpenAdvisories

Product · Discourse

discourse-code-review

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2025-46824

    Discourse Code Review Plugin vulnerable to XSS via auto link commits

    The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacker can execute arbitrary JavaScript on users' browsers by posting links to malicious GitHub commits. This problem is patched in commit eed3a…

    Discourse discourse-code-review