Skip to content
OpenAdvisories

Vendor

Legcord

2 known vulnerabilities.

Products

Legcord 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2026-105294

    Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

    Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfig bridge. Attackers exploiting a Discord XSS can set additionalArguments to per…

    Legcord Legcord
  • High 8.1
    CVE-2026-105293

    Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers

    Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can…

    Legcord Legcord