A vulnerability identified as problematic has been detected in Discourse up to 2025.12.1/2026.1.0. Impacted is an unknown function. This manipulation causes cross site scripting.
This vulnerability appears as CVE-2026-27154. The attack may be initiated remotely. There is no available exploit.
You should upgrade the affected component.
