Discourse is an open source community discussion platform. Discourse 2.8.10 and prior versions, 2.9.0.beta11 and prior versions contain a cross-site scripting vulnerability that can be exploited to inject malicious code and launch cross-site attacks.