Lucene search
+L

1 matches found

OSV
OSV
added 2025/06/09 12:33 p.m.9 views

CVE-2025-48062 Discourse vulnerable to HTML injection when inviting to topic via email

Discourse is an open-source discussion platform. Prior to version 3.4.4 of the stable branch, version 3.5.0.beta5 of the beta branch, and version 3.5.0.beta6-dev of the tests-passed branch, certain invites via email may result in HTML injection in the email body if the topic title includes HTML...

7.1CVSS6.8AI score
SaveExploits0References3
Rows per page
Query Builder