Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

329 records

Priority LOW 23

Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the email parameter of /email/unsubscribed.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00265 Published 2026-10-22 Fixed in 1.9.0.beta13 CWE-79
Load more