Vulnerabilities

TI-2022-18655 CVE-2022-39279

Discourse-chat plugin susceptible to XSS in channel name and description

LOW 25

discourse-chat is a plugin for the Discourse message board which adds chat functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00494 Published 2022-10-06 Fixed in 0.9 CWE-79

TI-2022-16480 CVE-2022-36057

LOW 25

Discourse-Chat is an asynchronous messaging plugin for the Discourse open-source discussion platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.005 Published 2022-09-06 Fixed in 0.9 CWE-79

TI-2022-13139 CVE-2022-31095

LOW 30

discourse-chat is a chat plugin for the Discourse application.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00584 Published 2022-06-21 Fixed in 0.4 CWE-200