CVE-2025-29513

A Cross-Site Scripting (XSS) vulnerability exists in NodeBB versions v4.0.4 and before . The flaw allows remote attackers to store arbitrary code within the admin API Access token generator , which could potentially lead to the execution of malicious code. To mitigate this risk, users should upda...