Skip to content
OpenAdvisories

Package · Packagist

verbb/comments

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2020-13868

    Comments plugin Cross-Site Request Forgery (CSRF)

    An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity.

    verbb/comments Packagist
  • Medium 5.4
    CVE-2020-13869

    Comments plugin stored Cross-site Scripting via a guest name

    An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name.

    verbb/comments Packagist
  • Medium 5.4
    CVE-2020-13870

    Comments plugin stored Cross-site Scripting (XSS) via an asset volume name

    An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name.

    verbb/comments Packagist