CVEvulnerability

CVE-2024-43408

6.3 MEDIUM Published 2024-08-20 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2024-08-20
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weaknesses: CWE-79

Description

Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in the html of the post. The vulnerability is fixed in commit a62f711d5600e4e5d86f342d52932cb6221672e7.

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://github.com/discourse/discourse-placeholder-theme-component/commit/a62f711d5600e4e5d86f342d52932cb6221672e7 github.com
https://github.com/discourse/discourse-placeholder-theme-component/security/advisories/GHSA-9wx4-cmv3-g5jw github.com

CVE-2024-43408

Description

Related

Weakness · CWE (1)

References