Skip to content
Discourse discourse-calendar
-
CVE-2024-45303
Medium 6.1
Discourse Calendar plugin event names susceptible to XSS
0.3%
-
CVE-2024-21658
Medium 4.3
Insufficient control of region value length in discourse-calendar
0.4%
-
CVE-2024-24817
Medium 4.3
User can see invitees in events created in PMs and private categories
0.4%
-
CVE-2024-26145
Medium 6.5
Uninvited user is able to join and mark the attendance of the the private event
0.4%
-
CVE-2023-43658
High 8.0
Improper escaping of user input in discourse-calendar
0.6%
-
CVE-2022-41913
Medium 4.3
Discourse-calendar exposes members of hidden groups
0.4%
-
CVE-2022-31059
Medium 6.5
Discourse Calendar Event names susceptible to Cross-site Scripting
0.8%