2025-01-24 00:00:00
mitre
PUBLISHED
A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the about me section of their profile.