Описание
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database.
Ссылки
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.0.4 (включая)
cpe:2.3:a:nodebb:nodebb:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00048
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
10 месяцев назад
Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database.
EPSS
Процентиль: 15%
0.00048
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79