UpHeron
All vulnerabilities

Servers and applications

CVE-2023-26040

Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the `tests-passed` branch. There are no known workarounds.

Severity
Medium 6.1
Published
17 Mar 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
DiscourseServers and applications · cpe:a:discourse:discourse
  • Version 3.1.0-beta2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-26040
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-26040