https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 05:11:21 +0000 https://db.gcve.eu/vuln/cve-2017-20290 <p><strong>Affected:</strong> Discourse</p> <p>Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the email parameter of /email/unsubscribed. Attackers can craft GET requests with SVG onload payloads, which unsubscribed.html.erb renders unescaped via html_safe, executing JavaScript in victims&#39; browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.</p> <p><strong>Affected:</strong> Discourse</p> <p>Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the email parameter of /email/unsubscribed. Attackers can craft GET requests with SVG onload payloads, which unsubscribed.html.erb renders unescaped via html_safe, executing JavaScript in victims&#39; browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.</p> https://db.gcve.eu/vuln/cve-2017-20290