In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.

Published May 14, 2021 · Updated Aug 4, 2024 · Assigned by mitre