Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Discourse Subscribe
Filtered by product Discourse Bbcode
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-46162 1 Discourse 1 Discourse Bbcode 2022-12-02 N/A 9.8 CRITICAL
discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin installed and enabled. This issue is patched in commit 91478f5. As a workaround, ensure that the Content Security Policy is enabled and monitor any posts that contain bbcode.