01 Record

CVE-2026-73038

NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name

MediumPUBLISHEDCNA: VulnCheck

Base score5.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

02 Description

NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name

Published: 2026-08-13 18:41Z1 DAY AGO
Last updated: 2026-08-14 16:52Z1 HR AGO
Reserved: 2026-08-10
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: Medium (CVSS 5.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Weaknesses: CWE-79
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: da7fdfb7a9424b1b762e9c557e69239399168600a7ea99321af9507ffe24f2dc

VendorProductVersionsPlatforms

NodeBBNodeBB0 to < 4.15.0—