Skip to main content

Discourse Calendar

3 CVEs product

Monthly

CVE-2024-21658 MEDIUM This Month

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Discourse Calendar
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2023-43658 MEDIUM PATCH This Month

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Discourse Calendar
NVD GitHub
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-31059 MEDIUM PATCH This Month

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Discourse Calendar
NVD GitHub
CVSS 3.1
5.4
EPSS
0.7%
EPSS 0% CVSS 4.3
MEDIUM This Month

discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Discourse Calendar
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Discourse Calendar
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM PATCH This Month

Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Discourse Calendar
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy