Verbb Comments
3 CVEs affecting Verbb Comments. Latest disclosed: 2020-06-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-13868 | Medium | 6.5 | 2020-06-05 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. |
CVE-2020-13870 | Medium | 5.4 | 2020-06-05 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name. |
CVE-2020-13869 | Medium | 5.4 | 2020-06-05 | An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. |