PT-2020-9729

Name of the Vulnerable Software and Affected Versions node-red versions prior to 0.20.8 Description A stored XSS issue is present in the node-red npm package, a visual tool for wiring the Internet of Things. This allows attackers to steal session cookies and deface web applications by executing...