Onyaktech Comments Pro Project Onyaktech Comments Pro
2 CVEs affecting Onyaktech Comments Pro Project Onyaktech Comments Pro. Latest disclosed: 2021-09-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-33484 | High | 7.5 | 2021-09-07 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a h… |
CVE-2021-33483 | Medium | 5.4 | 2021-09-07 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows an attacker to add an XSS payload to th… |