CVE-2015-9286

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS...

CVE-2015-9286

NodeBB

CVE-2015-9286

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS...

CVE-2015-9286: Improper Neutralization of Input During Web Page Generation

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS...

PT-2019-7245

Name of the Vulnerable Software and Affected Versions NodeBB versions prior to 0.7.3 Description The issue is related to outgoing XSS in the controllers/index.js file. Recommendations For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue...

apostrophe (>=0.4.113, <=0.4.144), apostrophe-tumblr (>=0.5.1, <=0.5.13) +1 more potentially affected by CVE-2017-16017 via sanitize-html (>=0.1.4, <=1.1.4)

sanitize-html NPM version =0.1.4, =0.4.113, =0.5.1, =0.0.1, =0.2.3 Source cves: CVE-2017-16017 Source advisory: MEND:CVE-2017-16017...

Cross-Site Scripting (XSS)

The NodeBB forum software is vulnerable to cross-site scriptingXSS. The flag pages description did not properly validate data as text. An attacker could have introduced code injection through the description field...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript: or 2 data: URLs...

CVE-2015-3296

Multiple cross-site scripting XSS vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript: or 2 data: URLs...

CVE-2015-3296

Multiple cross-site scripting XSS vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript: or 2 data: URLs...

CVE-2015-3296

Multiple cross-site scripting XSS vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript: or 2 data: URLs...

CVE-2015-3296

CVE-2015-3296: NodeBB before 0.7 is affected by cross-site scripting in its Markdown processing, allowing remote attackers to inject arbitrary script via javascript: or data: URLs. The vulnerability is tied to insufficient input filtering in the Markdown/html rendering path (markdown-it-based) in...

CVE-2015-3296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 javascript: or 2 data: URLs...

PT-2017-6659

Name of the Vulnerable Software and Affected Versions NodeBB versions prior to 0.7 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific vectors, including 1 javascript: or...

Script Injection

nodebb is vulnerable to script injection. It does not properly escape translation tokens in topic titles, descriptions, profile about areas, and post content, thereby allowing malicious users to inject scripts...

Ubiquiti Inc.: Stored XSS / Bypassing .htaccess protection in http://nodebb.ubnt.com/

Hello, While I was looking at your renewn SSL certificated, I have noticed the following link : http://nodebb.ubnt.com/ I have seen that this link was protected by htaccess password, but I have decided to run a nmap scan. By running the following : sudo nmap -sSV -p- 104.131.159.88 -oA stageph -T...

Remote Code Execution (RCE)

NodeBB is vulnerable to remote code execution attacks. If a malicious user is able to force an admin to run a special JavaScript code, it is possible to remotely execute code during the installation or updating of plugins. This is caused because the npm commands executed are not sanitized...

NodeBB Detection (HTTP)

HTTP based detection of NodeBB. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.111100";...

NodeBB < 0.7.3 XSS Vulnerability - Active Check

NodeBB is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

NodeBB < 0.7.0 XSS Vulnerability

NodeBB is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...