CVE-2026-32243: Improper Neutralization of Input During Web Page Generation

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an attacker with the ability to create shared AI conversations could inject arbitrary HTML and JavaScript via crafted...

PT-2019-9541

Name of the Vulnerable Software and Affected Versions LayerBB version 1.1.1 Description The issue allows for XSS via the titles of conversations, specifically private messages PMs. Recommendations For LayerBB version 1.1.1, consider restricting the ability to set conversation titles until a fix i...