Description
Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.
Remediation
References
https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529
https://github.com/NodeBB/NodeBB/pull/3371
https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625
https://www.vulnerability-lab.com/get_content.php?id=1608
Related Vulnerabilities
CVE-2018-3737 Vulnerability in maven package org.webjars.npm:sshpk
CVE-2022-1243 Vulnerability in maven package org.webjars.npm:urijs
CVE-2020-2295 Vulnerability in maven package org.jkva.maven-plugins:cascading-release-maven-plugin
CVE-2021-39167 Vulnerability in npm package @openzeppelin/contracts
CVE-2019-10291 Vulnerability in maven package org.jenkins-ci.plugins:netsparker-cloud-scan