CVE-2026-55674 | Discourse up to 2026.1.5/2026.5.1/2026.6.0 color_scheme_id/dark_scheme_id cross site scripting

A vulnerability, which was classified as problematic, has been found in Discourse up to 2026.1.5/2026.5.1/2026.6.0. The impacted element is an unknown function. The manipulation of the argument color_scheme_id/dark_scheme_id leads to cross site scripting.

This vulnerability is listed as CVE-2026-55674. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More