Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed

Discourse: Open redirect via `sso_destination_url` cookie in `enter`

Discourse has Stored XSS in AI Triage Automation

Discourse Vulnerable to Stored XSS via Shared AI Conversation Onebox

Discourse has XSS when editing a malicious post

Discourse allows script execution in uploaded HTML/XML files on S3

Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow

Discourse vulnerable to HTML injection when inviting to topic via email

HTMLi(XSS without CSP) via Onebox urls in Discourse

Stored DOM-based XSS (without CSP) via video placeholders in Discourse

Magnific lightbox susceptible to Cross-site Scripting in Discourse

Cross-site Scripting (XSS) via chat excerpts when content security policy (CSP) disabled in Discourse

Discourse allows iframe injection though default site setting

Discourse has an XSS via Onebox system

Discourse vulnerable to stored-dom XSS via Facebook Oneboxes

Discourse improperly sanitized user input leads to XSS

HTML injection in oneboxed links

CSP nonce reuse vulnerability in Discourse

HTML injection via topic embedding in Discourse

Discourse chat messages susceptible to Cross-site Scripting through chat excerpts

Discourse vulnerable to Cross-site Scripting through tag descriptions

Discourse vulnerable to Cross-site Scripting through pending post titles descriptions

Discourse is an open source discussion platform

Discourse is an open source discussion platform

Potential Backup file leaked via Nginx in Discourse

Regular expression denial of service via installing themes via git in discourse

Discourse is an open source discussion platform

Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint

Discourse vulnerable to private topic leak via email#send_digest

Discourse: Stored HTML injection in video notification emails

Discourse: Block post iframes whose encoded userinfo bypasses the allowed_iframes allowlist

Discourse: Stored XSS via unescaped actor name in post actions

Discourse: Stored XSS in staff action logs injects staff UI

Discourse: Insufficient SVG sanitization logic

Discourse: Topic featured link susceptible to stored XSS

Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts

Discourse: Category group moderators can perform actions on topics in restricted categories without read access

Discourse: Stored XSS via unescaped assignee name

Discourse: XSS on category description update via API

Discourse: Stored XSS in discourse-ai shared conversations onebox

Discourse's solved topic stream has potential stored XSS in topic title

Discourse user can create Zendesk tickets even when it does not have access to topic

Discourse has a Hidden Solved topics permission bypass

Discourse has stored click‑based XSS via Graphviz SVG javascript: links

Discourse hardens chat DM channel creation and expansion

Discourse vulnerable to HTML injection via prohibited iframe URLs

Discourse's Fail-Open Access Control in Data Explorer Plugin Allows Unauthorized SQL Query Execution

DIscourse's discourse-policy plugin lacks post access check

Discourse has insecure default configuration that allows non-admin moderators to takeover any non-staff account via email change

Discourse non-admin moderators can exfiltrate private content via post ownership transfer