medium6.1
CVE-2025-29513
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.
Impact
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodebb | Nodebb | through 4.0.4 |