CVE-2025-29513

A Cross-Site Scripting (XSS) vulnerability exists in NodeBB versions v4.0.4 and before . The flaw allows remote attackers to store arbitrary code in the admin API Access token generator , which could potentially lead to the execution of malicious code. To remediate this, users should update to ve...