The exporter injects the raw emoji name into the alt attribute and the emoji code into the title attribute without performing HTML entity encoding. If an emoji name contains characters that break out of the attribute context, an attacker can insert a new attribute or script tag into the resulting HTML file. The current Discord validation prevents most problematic characters, but an offline source or a future metadata change could supply a crafted name, enabling local execution of arbitrary code when the file is opened in a browser or similar environment.

Tyrrrz's DiscordChatExporter, any build prior to version 2.47.2, regardless of the markdown export option, is affected. Users who process Discord chat history with older releases are at risk.

The CVSS base score of 4.1 indicates moderate severity, and the EPSS score is not available, so the precise likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to supply a crafted emoji name that is preserved during export; once an HTML file built with the vulnerable code is opened, the injected script executes with the privileges of the viewing user. Because the attack vector can be supplied via tampered offline data, it can be carried out locally without network communication.