← Database

CVE-2024-57041

MEDIUM CVSS: 4.6 Published: 2025-01-24 Modified: 2026-07-05

Description

A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile.

Affected Platforms

Nodebb Nodebb

Weakness Type

CWE-79

References