Lucene search

K
osvGoogleOSV:GHSA-JHHF-C849-3RH2
HistoryMay 24, 2022 - 5:19 p.m.

Comments plugin stored Cross-site Scripting via a guest name

2022-05-2417:19:26
Google
osv.dev
2

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via a guest name.

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

Related for OSV:GHSA-JHHF-C849-3RH2