CVE-2024-53266

Published: 2025-02-04T22:15Z

Last Modified: 2025-02-04T22:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, and with CSP disabled, activity streams in the user's profile page may be vulnerable to XSS. This has been patched in the latest version of Discourse core. Users are advised to upgrade. Users unable to upgrade should ensure CSP is enabled. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt