description: A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.
problem types: Cross-site Scripting (XSS) - Stored (CWE-79)
affected:
{
product: node-red
vendor: n/a
versions:
status: affected, version: 0.20.7 and earlier
}