Approved changes feed: RSS · Atom

cpe:2.3:a:discourse:discourse-placeholder-theme-component:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDiscourse (2d3c125b-857a-5933-b846-ed7f9d5e0225)
ProductDiscourse Placeholder Theme Component (15bcce10-6d41-5ab4-9dcc-bb2e122dcfdb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43408 vulnerable 2026-06-03 14:56:45.362796 Discourse Placeholder Forms has a XSS stopped by CSP
MEDIUM (6.3)
Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in the html of the post. The vulnerability is fixed in commit a62f711d5600e4e5d86f342d52932cb6221672e7.
Published: 2024-08-20T16:28:48.424Z
Updated: 2024-09-03T14:56:18.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.