Skip to content
OpenAdvisories

Product · Discourse

discourse-mermaid-theme-component

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2022-46180

    Arbitrary HTML injection in discourse-mermaid-theme-component

    Discourse Mermaid (discourse-mermaid-theme-component) allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary …

    Discourse discourse-mermaid-theme-component