XSS Vulnerability in Discourse Open-Source Discussion Platform

CVE-2026-32273

What is CVE-2026-32273?

Discourse, the open-source discussion platform, has identified a vulnerability where the API does not sanitize category description inputs. This oversight allows for potential XSS attacks, enabling malicious users to inject harmful scripts into web pages viewed by others. The vulnerability affects specific versions of the platform and has been remediated in the latest updates. It is crucial for users to update their Discourse installations to the patched versions to mitigate the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References