6 matches found
CVE-2025-29512
Cross-Site Scripting XSS vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database...
CVE-2025-29512
Cross-Site Scripting XSS vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database...
CVE-2025-29512
NodeBB versions v4.0.4 and before are vulnerable to a Stored Cross-Site Scripting (XSS) issue. This vulnerability allows remote attackers to store arbitrary code, which can potentially render the blacklist IP functionality unusable until the malicious content is manually removed via the database....
NodeBB Cross-site scripting (XSS) vulnerability
A persistent cross-site scripting XSS vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile...
