Stored XSS Vulnerability in Discourse Discussion Platform

CVE-2026-33411

What is CVE-2026-33411?

The Discourse discussion platform has a vulnerability that allows for potential stored cross-site scripting (XSS) attacks through topic titles in the solved posts stream. This affects versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2. It is recommended to update to the patched versions to mitigate this risk. Users should also ensure that their Content Security Policy is enabled and configured correctly to further protect against XSS threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References