VYPR

Discourse Encrypt

by Discourse (software)

CVEs (1)

  • CVE-2023-43657HigSep 28, 2023
    risk 0.00cvss 7.2epss 0.00

    discourse-encrypt is a plugin that provides a secure communication channel through Discourse. Improper escaping of encrypted topic titles could lead to a cross site scripting (XSS) issue when a site has content security policy (CSP) headers disabled. Having CSP disabled is a…