CVE-2024-57041

Published: Jan 24, 2025
Updated: Aug 11, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-57041" target="_blank" rel="noopener"> CVE-2024-57041
GHSA: <a href="https://github.com/advisories/GHSA-vqr3-vrrg-f3jh" target="_blank" rel="noopener"> GHSA-vqr3-vrrg-f3jh
Severity: Medium
Exploit:

A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile.