CVE-2024-52794CWE-79

Magnific lightbox susceptible to Cross-site Scripting in Discourse

Medium · published December 19, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-12-19T19:12Z
EPSS history
Timeline
  • 19 DEC 19:12Z
    Magnific lightbox susceptible to Cross-site Scripting in Discourse
    cvelistv5