Cross-site Scripting in NodeBB

MEDIO 6.1CVE-2015-9286 · GHSA-72fv-qgj6-2w2p · Published 30/04/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
nodebb nodebb	`< 0.7.3`	`0.7.3`
nodebb npm	`< 0.8.2`	`0.8.2`

Description

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

NVD description

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.