CVE-2021-32764 : Exploit Details and Defense Strategies

Discourse, an open-source discussion platform, is vulnerable to XSS attacks in versions prior to 2.7.6. This CVE allows attackers to exploit the parsing and rendering of YouTube Oneboxes on sites with modified or disabled Content Security Policies.