Discourse Discourse Reactions — known CVE vulnerabilities

Every CVE whose affected-product data names Discourse Discourse Reactions, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-41140 — CVSS 5.3 (medium): Discourse-reactions is a plugin for the Discourse platform that allows user to add their reactions to the post. In affected versions…
• CVE-2023-49098 — CVSS 3.5 (low): Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be…