Description
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.
Medium · 6.1
CVE-2025-29513
EUVD-2025-11882GHSA-v2rc-5jqj-6rmg
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Acces…
Published Apr 18, 2025 · Updated Jul 5, 2026 · Assigned by mitre