Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the `tests-passed` branch. There are no known workarounds.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2023-03-17 08:15
Updated : 2023-03-17 08:44
NVD link : CVE-2023-26040
Mitre link : CVE-2023-26040
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
No product.