CVE-2025-29512

6.1

Medium

CVE-2025-29512

18 Apr 2025

cve@mitre.org

Analyzed

Description

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

cve@mitre.org

http://nodebb.com

cve@mitre.org

https://www.tonysec.com/posts/cve-2025-29512/