CVE-2021-31550

An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers...

EUVD-2021-18447

Malware in sbrugna...

EUVD-2025-22931

Malicious code in bioql PyPI...

CVE-2025-54298

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54298

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54298

CVE-2025-54298 affects the Firecoders/CommentBox Joomla component, specifically versions 1.0.0–1.1.0, with a stored XSS vulnerability in the CommentBox component. The issue is described as a stored XSS that can impact confidentiality, integrity, and availability, with high/critical risk indicator...

CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

Firecoders Joomla component CommentBox 跨站脚本漏洞

Firecoders Joomla component CommentBox is a Joomla commenting component from Firecoders Greece. A cross-site scripting vulnerability exists in Firecoders Joomla component CommentBox versions 1.0.0 through 1.1.0, which stems from vulnerability to stored cross-site scripting attacks...

PT-2025-31137 · Unknown · Commentbox

Name of the Vulnerable Software and Affected Versions: CommentBox versions 1.0.0 through 1.1.0 Description: A stored cross-site scripting XSS issue exists in the CommentBox component. This allows for the injection of malicious scripts into the application through the component. Recommendations:...

BIT-MEDIAWIKI-2021-31550

An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers...

Design/Logic Flaw

An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers...

CVE-2021-31550

An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers...

CVE-2021-31550

CVE-2021-31550 affects the MediaWiki CommentBox extension (up to 1.35.2). The issue allows XSS through crafted configuration variables introduced by a malicious actor, impacting multiple layers. Connected sources corroborate the same description across multiple ecosystems, but none provide a conc...

PT-2021-19421 · Mediawiki +1 · Commentbox Extension +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 CommentBox extension for MediaWiki versions through 1.35.2 Description: An issue was discovered that allows a malicious actor to introduce XSS payloads into various layers via crafted configuration variables...