Skip to content
OpenAdvisories

Product · Discourse

discourse-encrypt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2023-43657

    Improper escaping of encrypted topic titles can lead to Cross-site Scripting under non-default site configuration

    discourse-encrypt is a plugin that provides a secure communication channel through Discourse. Improper escaping of encrypted topic titles could lead to a cross site scripting (XSS) issue when a site has content security policy (CSP) headers disabled. Having C…

    Discourse discourse-encrypt