Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2025-29512

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database.

  • Published: Apr 18, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-29512
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
nodebb / nodebb - 4.0.4.x