Anycomment Security Vulnerabilities and Issues — Anycomment CVE List

Lucene search

BologerAnycomment

2 matches found

CVE•added 2022/01/17 1:15 p.m.•62 views

CVE-2021-24838

The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.

6.1CVSS6.2AI score0.02345EPSS

CVE•added 2019/08/27 12:15 p.m.•38 views

CVE-2018-21001

The anycomment plugin before 0.0.33 for WordPress has XSS.

6.1CVSS6.4AI score0.0021EPSS