CVE-2026-72725 | Discourse up to 2026.1.5/2026.5.1/2026.6.0 Staff Action Log Model cross site scripting

A vulnerability, which was classified as problematic, was found in Discourse up to 2026.1.5/2026.5.1/2026.6.0. Affected is an unknown function of the component Staff Action Log Model. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-72725. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More