UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41095

Discourse is an open source discussion platform. There is a cross-site scripting (XSS) vulnerability in versions 2.7.7 and earlier of the `stable` branch, versions 2.8.0.beta6 and earlier of the `beta` branch, and versions 2.8.0.beta6 and earlier of the `tests-passed` branch. Rendering of some error messages that contain user input can be susceptible to XSS attacks. This vulnerability only…

Severity
Medium 6.1
Published
27 Sept 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 2.8.0-beta6
  • Version 2.8.0-beta5
  • Version 2.8.0-beta4
  • Version 2.8.0-beta3
All 7 release lines
  • Every version up to 2.7.7
  • Version 2.8.0-beta1
  • Version 2.8.0-beta2
  • Version 2.8.0-beta3
  • Version 2.8.0-beta4
  • Version 2.8.0-beta5
  • Version 2.8.0-beta6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41095
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41095