Discourse Calendar vulnerabilities

• discourse calendar, discourse-calendar +1 more Discourse Calendar plugin event names susceptible to XSS CVE-2024-45303 6.1 MediumSeptember 12, 2024
• discourse discourse-calendar, calendar +1 more Insufficient control of region value length in discourse-calendar CVE-2024-21658 4.3 MediumAugust 30, 2024
• discourse calendar, discourse-calendar +1 more User can see invitees in events created in PMs and private categories CVE-2024-24817 4.3 MediumFebruary 22, 2024
• discourse calendar, discourse-calendar +1 more Uninvited user is able to join and mark the attendance of the the private event CVE-2024-26145 6.5 MediumFebruary 21, 2024
• discourse discourse-calendar, calendar +1 more Improper escaping of user input in discourse-calendar CVE-2023-43658 8.0 HighOctober 16, 2023
• discourse calendar, discourse-calendar +1 more Discourse-calendar exposes members of hidden groups CVE-2022-41913 4.3 MediumNovember 14, 2022
• discourse calendar, discourse-calendar +1 more Discourse Calendar Event names susceptible to Cross-site Scripting CVE-2022-31059 6.5 MediumJune 14, 2022