CVE-2025-29512 Information

Description

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database.

Reference

http://nodebb.com https://www.tonysec.com/posts/cve-2025-29512/