Eight high-severity vulnerabilities have been discovered in NodeBB, a popular Node.js-based forum platform, exposing millions of users to risks including private message leaks, stored cross-site scripting (XSS), and full forum compromise. The issues affect all NodeBB versions prior to 4.14.0 and were uncovered during an AI-assisted whitebox penetration test conducted by Aikido. The findings reveal […]
The post Eight NodeBB Vulnerabilities Let Hackers Read Your Private Chats and Take Over the Forum appeared first on Cyber Security News.
Read the original article: