CVE-2020-15885

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

CVE-2020-15885

This CVE concerns MunkiReport’s comment module prior to version 4.0, where a Cross-Site Scripting (XSS) vulnerability exists. The issue allows remote attackers to inject arbitrary web script or HTML by posting a new comment, with the potential to affect users who view comments. The available conn...

PT-2020-14686

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 4.0 Description A Cross-Site Scripting XSS issue exists in the comment module, allowing remote attackers to inject arbitrary web script or HTML by posting a new comment. Recommendations For versions prior to 4.0,...

CVE-2020-15885: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

PT-2020-22662

Name of the Vulnerable Software and Affected Versions VIPS affected versions not specified Description The issue is related to a stack buffer overflow error. Technical details about the crash include the write png comment function, vips slist map2 function, and vips image map function...

U.S. Dept Of Defense: Stored XSS via Comment Form at ████████

Summary: An attacker can submit a comment form with injected HTML, leading to a number of malicious effects Step-by-step Reproduction Instructions 1. Browse to https://████ 2. Complete the form. I placed " in the Name field. Some example payloads for the Comments field are as follows: For...

CVE-2019-20410

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...

CVE-2019-20410

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...

PT-2020-10427

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.6.17 Atlassian Jira Server and Data Center versions 7.7.0 through 7.13.8 Atlassian Jira Server and Data Center versions 8.0.0 through 8.4.1 Description The issue allows remote attackers...

CVE-2019-20410: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...

PT-2020-16064 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.4.2 Description: In WordPress, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public. This issue is related to the comment-template.php file in the...

Comment button visible to users without permission on boards

h3. Issue Summary When a project's permissions are set to allow viewing by any logged in user, but commenting is limited to specific project roles, if a user attempts to comment from a board, the button is available to them and they see the following error message: panel:bgColor=eeeeee...

Pixel & Tonic Craft CMS Comments plugin cross-site request forgery vulnerability

Pixel & Tonic Craft CMS is the U.S. Pixel & Tonic company's set of content management system CMS. Comments plugin is one of the code comment generation plugin. A cross-site request forgery vulnerability exists in the Pixel & Tonic Craft CMS Comments plugin. An attacker can exploit this...

CVE-2020-13868

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity...

Cross site request forgery (csrf)

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity...

CVE-2020-13868

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity...

PT-2020-13741

Name of the Vulnerable Software and Affected Versions Craft CMS Comments plugin versions prior to 1.5.5 Description An issue affects comment integrity due to CSRF. Recommendations For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue...

CVE-2020-13868: Cross-Site Request Forgery (CSRF)

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity...

XSS Vulnerability at jfinal cms comment feeds

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms feedback at the existence of XSS vulnerability , an attacker can explo...

Victor CMS 'comment_author' Cross-Site Scripting Vulnerability

Victor CMS is a PHP-based content management system CMS. Victor CMS 'commentauthor' cross-site scripting vulnerability. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...