CVE-2023-22455 Discourse vulnerable to Cross-site Scripting through tag descriptions

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, tag descriptions, which can be updated by moderators, can be used for cross-site scripting attacks. This vulnerability can lead to a full...

CVE-2023-22455

Discourse (open-source discussion platform) is affected by CVE-2023-22455 through tag descriptions that moderators can update, enabling cross-site scripting (XSS) on sites with relaxed Content Security Policy. Affected: versions prior to 2.8.14 (stable) and prior to 3.0.0.beta16 (beta/tests-passe...

CVE-2023-22455 Discourse vulnerable to Cross-site Scripting through tag descriptions

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, tag descriptions, which can be updated by moderators, can be used for cross-site scripting attacks. This vulnerability can lead to a full...