CVE-2020-13870

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name...

CVE-2020-13870

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name...

CVE-2020-13870

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name...

CVE-2020-13870: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name...

PT-2020-13743

Name of the Vulnerable Software and Affected Versions Craft CMS Comments plugin versions prior to 1.5.5 Description A stored XSS issue was discovered via an asset volume name. Recommendations For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue...