Vulnerabilities

TI-2024-30374 CVE-2024-45303

Discourse Calendar plugin event names susceptible to XSS

LOW 27

Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00256 Published 2024-09-12 Fixed in 0.5 CWE-79

TI-2024-16334 CVE-2024-24817

LOW 24

Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on the open-source discussion platform Discourse.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00419 Published 2024-02-22 Fixed in 0.4 CWE-200

TI-2024-17235 CVE-2024-26145

LOW 31

Discourse Calendar adds the ability to create a dynamic calendar in the first post of a topic on Discourse.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00393 Published 2024-02-21 No fix listed CWE-863

TI-2022-20254 CVE-2022-41913

LOW 25

Discourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00425 Published 2022-11-14 Fixed in 0.3 CWE-200