CVE-2015-9286 Cross-site Scripting in NodeBB
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm nodebb(npm) | < 0.8.2 | 0.8.2 |
| NodeBB | < 0.7.3 | 0.7.3 |
References
- nvd.nist.gov third-party-advisory
- github.com patch third-party-advisory
- github.com release-notes third-party-advisory
- vulners.com exploit third-party-advisory
- www.vulnerability-lab.com exploit third-party-advisory
- github.com