Skip to content
OpenAdvisories

Vendor

Tyrrrz

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.1

    DiscordChatExporter: HTML attribute injection via unescaped emoji name in HTML export

    DiscordChatExporter saves Discord chat logs to a file. Prior to 2.47.2, the VisitEmojiAsync method in DiscordChatExporter.Core/Exporting/HtmlMarkdownVisitor.cs interpolates emoji.Name into the alt attribute and emoji.Code into the title attribute without HTML…