Description
3.5.0.beta6 之前的 Discourse 版本在OAuth/社交登录功能中存在存储型跨站脚本（XSS）漏洞。该漏洞是由于在处理社交登录失败时缺乏适当的内容安全策略实施导致的，这使得远程攻击者能够在用户浏览器中注入并执行恶意脚本。可以使用payload进行meta重定向跳转：%3Cmeta%20http-equiv%3D%22refresh%22%20content%3D%220%3Burl%3Dhttps%3A//evil.com%22%3E
Discourse存在XSS漏洞(CVE-2025-48954)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-48954
https://github.com/discourse/discourse/security/advisories/GHSA-26p5-mjjh-wfcf
https://www.cve.org/CVERecord?id=CVE-2025-48954
https://www.ameeba.com/blog/cve-2025-48954-cross-site-scripting-vulnerability-in-discourse-social-login/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-26829
https://pentest-tools.com/vulnerabilities-exploits/discourse-35x-350beta6-xss-vulnerability_27361
https://www.cybersecurity-help.cz/vdb/SB20250716118
https://vulert.com/vuln-db/CVE-2025-48954
https://ddpoc.com/DVB-2025-9950.html
https://osv.dev/vulnerability/CVE-2025-48954