Cross-Site Scripting (XSS)

nodeBB is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via Controllers.outgoing in controllers/index.js...

Cross site scripting

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS...