CVE-2025-29512

NodeBB versions v4.0.4 and before are vulnerable to a Cross-Site Scripting (XSS) issue. This vulnerability allows remote attackers to store arbitrary code, which can potentially render the blacklist IP functionality unusable until the malicious content is manually removed from the database. To re...