Описание
NodeBB Cross-site scripting (XSS) vulnerability
A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile.
Пакеты
Наименование
nodebb
npm
Затронутые версииВерсия исправления
< 3.11.1
3.11.1
Связанные уязвимости
CVSS3: 4.6
nvd
около 1 года назад
A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile.