By the Year
In 2023 there have been 0 vulnerabilities in Discourse Bbcode . Last year Discourse Bbcode had 1 security vulnerability published. Right now, Discourse Bbcode is on track to have less security vulnerabilities in 2023 than it did last year.
It may take a day or so for new Discourse Bbcode vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Discourse Bbcode Security Vulnerabilities
discourse-bbcode is the official BBCode plugin for Discourse
9.8 - Critical
- November 30, 2022
discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin installed and enabled. This issue is patched in commit 91478f5. As a workaround, ensure that the Content Security Policy is enabled and monitor any posts that contain bbcode.