CVE-2025-22602 — Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary JavaScript on users' browsers by posting a malicious video placeholder html el — CVE Database · The Intelligence Room