Skip to content
OpenAdvisories

Product · Discourse

discourse-footnote

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2021-43827

    Inline footnotes wrapped in <a> tags can cause errors in discourse-footnotes

    discourse-footnote is a library providing footnotes for posts in Discourse. ### Impact When posting an inline footnote wrapped in `<a>` tags (e.g. `<a>^[footnote]</a>`, the resulting rendered HTML would include a nested `<a>`, which is stripped by Nokogiri be…

    Discourse discourse-footnote