What’s Vulnerable › Products

discourse-calendar vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your discourse-calendar version is affected

Latest discourse-calendar vulnerabilities

• CVE-2024-45303 — Discourse Calendar plugin event names susceptible to XSS (CVSS 6.1)
• CVE-2024-24817 — User can see invitees in events created in PMs and private categories (CVSS 5.3)
• CVE-2024-26145 — Uninvited user is able to join and mark the attendance of the the private event (CVSS 4.3)
• CVE-2022-41913 — Discourse-calendar exposes members of hidden groups (CVSS 5.4)