Our AI pentest found eight high-severity vulnerabilities in NodeBB in six hours.
XSS bugs that required a custom Federation server to exploit, a template injection affecting practically every input, private message leaks, and post hijacking.
NodeBB fixed all eight. More below 🧵