Discourse
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 307 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 29, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Discourse: Templates endpoint exposes hidden tag names
Discourse: Strip SQL comments and use non-recursive parameter interpolation in Data Explorer
Discourse: Stored XSS chat-transcript username unescaped in Rich Text Editor
Discourse: Stored XSS in discourse-local-dates plugin
Discourse: Onebox iframe origin allowlist enforces URL authority boundary
Discourse: Stored XSS in the moderation review queue
Discourse: Unauthorized eavesdropping on private AI bot conversations.
Discourse: Stored XSS in staff action logs injects staff UI
Discourse: Anonymous sidebar serialization exposes descriptions of category-restricted tags
Discourse: Duplicate lookup reveals restricted topic titles through canonicalized URLs
Monitor Discourse in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.