Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion.Referenceshttps://github.com/edx/edx-platform/pull/28379
