Discourse 2.8.0.beta6 < 2.9.0.beta5 XSS Vulnerability

Discourse is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2021-23084 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions 2.7.7 and earlier Discourse versions 2.8.0.beta6 and earlier Description: Discourse is an open source discussion platform. There is a cross-site scripting XSS vulnerability in the platform. Rendering of some error messages...