Login Request a demo
DI
Product
discourse-calendar
by discourse · last CVE Sep 12, 2024
6
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add discourse-calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45303
6.1
0%
Sep 12
Discourse Calendar plugin event names susceptible to XSS
Affected: < 0.5
CVE-2023-43658
6.1
1%
Oct 16
Improper escaping of user input in discourse-calendar
Affected: < 97883109
CVE-2022-31059
5.4
1%
Jun 14
Discourse Calendar is a calendar plugin for Discourse, an open-source messaging app
Affected: before 1.0.1
CVE-2024-24817
5.3
0%
Feb 22
User can see invitees in events created in PMs and private categories
Affected: < 0.4
CVE-2024-21658
4.3
0%
Aug 30
Insufficient control of region value length in discourse-calendar
Affected: < 66259cd21dc6a1b2139d9833f3f847d8013e6759
CVE-2024-26145
4.3
0%
Feb 21
Uninvited user is able to join and mark the attendance of the the private event
Affected: >= 2201b254, < dfc4fa15f340189f177a1d1ab2cc94ffed3c1190
Showing 6