Description
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Team Heateor | Fancy Comments WordPress | ≤ 1.2.10 | — |
Medium · 6.5
CVE-2023-23670
EUVD-2023-27757GHSA-m6xg-fffj-525f
WordPress Fancy Comments WordPress Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)
Published Mar 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack