A vulnerability was found in Discourse up to 3.5.0 and classified as problematic. Impacted is an unknown function of the component Quote Message Handler. The manipulation results in basic cross site scripting.
This vulnerability is cataloged as CVE-2025-58054. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.