How many discourse discourse-calendar CVEs are in CISA KEV?

None of discourse discourse-calendar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of discourse discourse-calendar are affected?

16 distinct discourse discourse-calendar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in discourse discourse-calendar CVEs?

discourse discourse-calendar's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption), CWE-863 (Incorrect Authorization).

What is the average severity of discourse discourse-calendar CVEs?

The average CVSS base score across discourse discourse-calendar's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

discourse

7 CVEs

discourse discourse-calendar Vulnerabilities

Name: discourse discourse-calendar vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for discourse-calendar by discourse.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.0

Avg CVSS

2022–2024

Last updated September 12, 2024

Overview

discourse discourse-calendar has 7 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting discourse discourse-calendar, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of discourse discourse-calendar's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of discourse discourse-calendar's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No discourse discourse-calendar CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every discourse discourse-calendar version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.31 CVE
< 0.41 CVE
< 0.51 CVE
< 1.0.11 CVE
< 2024-02-211 CVE
< 978831091 CVE
<= 0.21 CVE
<= 2023-10-161 CVE

Fixed in

0.41 CVE
1.0.11 CVE
2024-02-211 CVE
2719b9e81994e961bf8c4e12b4556dc9777dd62f1 CVE
84ef46a38cf02748ecacad16c5d9c6fec12dc8da1 CVE
9788310906febb36822d6823d14f1059c39644de1 CVE
ca5ae3e7e0c2b32af5ca4ec69c95e95b2ecef2e91 CVE
dfc4fa15f340189f177a1d1ab2cc94ffed3c11901 CVE

Find a version

7 CVEs

Sort

Discourse Calendar plugin event names susceptible to XSS
CVE-2024-45303
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.2% (15th pct)2024-09-12
Insufficient control of region value length in discourse-calendar
CVE-2024-21658
Patch
CWE-400
Medium · CVSS 4.3
EPSS 0.4% (28th pct)2024-08-30
Medium vulnerability · 2024-02-22
CVE-2024-24817
Patch
CWE-200
Medium · CVSS 5.3
EPSS 0.4% (34th pct)2024-02-22
Medium vulnerability · 2024-02-21
CVE-2024-26145
Patch
CWE-863
Medium · CVSS 6.5
EPSS 0.4% (32th pct)2024-02-21
High vulnerability · 2023-10-16
CVE-2023-43658
Patch
CWE-79
High · CVSS 8.0
EPSS 0.5% (40th pct)2023-10-16
Medium vulnerability · 2022-11-14
CVE-2022-41913
Patch
CWE-200
Medium · CVSS 5.4
EPSS 0.4% (30th pct)2022-11-14
Medium vulnerability · 2022-06-14
CVE-2022-31059
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.7% (49th pct)2022-06-14

Common weakness types

The CWE weakness categories most often found in discourse discourse-calendar CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many discourse discourse-calendar CVEs were published each year.

2022

2

2023

1

2024

4

Other discourse products

Browse vulnerabilities for other products by discourse.

discourse264 CVEs calendar4 CVEs discourse-reactions4 CVEs discourse calendar3 CVEs discourse-chat3 CVEs discourse-ai2 CVEs discourse reactions2 CVEs ai1 CVEs

All discourse vulnerabilities

Frequently asked questions

Common questions about discourse discourse-calendar vulnerabilities.

How many CVEs does discourse discourse-calendar have?: discourse discourse-calendar has 7 published CVE records since 2022.
How many discourse discourse-calendar CVEs are in CISA KEV?: None of discourse discourse-calendar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for discourse discourse-calendar vulnerabilities?: No discourse discourse-calendar CVEs currently have a tracked public exploit in this dataset.
Which versions of discourse discourse-calendar are affected?: 16 distinct discourse discourse-calendar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in discourse discourse-calendar CVEs?: discourse discourse-calendar's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption), CWE-863 (Incorrect Authorization).
What is the average severity of discourse discourse-calendar CVEs?: The average CVSS base score across discourse discourse-calendar's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track discourse discourse-calendar vulnerabilities

Monitor new discourse discourse-calendar vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing