CVE-2026-54681

DiscordChatExporter prior to 2.47.2 is vulnerable to HTML attribute injection in its HTML export functionality. The VisitEmojiAsync method in DiscordChatExporter.Core/Exporting/HtmlMarkdownVisitor.cs interpolates emoji.Name into the alt attribute and emoji.Code into the title attribute without HT...