Lucene search
Veracode Vulnerability DatabaseVERACODE:25622HistoryJun 08, 2020 - 3:03 a.m.
Cross-site Scripting (XSS)
2020-06-0803:03:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
23.0%
verbb/comments is vulnerable to cross-site scripting (XSS). It is possible because it does not sanitize the user-provided input for guest name username, allowing an attacker to inject and execute malicious scripts in a user’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| verbb/comments | le | 1.5.5 |
Related
nvd
nvd
CVE-2020-13869
2020-06-05 19:15:13
osv
osv
CVE-2020-13869
2020-06-05 19:15:13
Comments plugin stored Cross-site Scripting via a guest name
2022-05-24 17:19:26
github
github
Comments plugin stored Cross-site Scripting via a guest name
2022-05-24 17:19:26
prion
prion
Cross site scripting
2020-06-05 19:15:00
cve
cve
CVE-2020-13869
2020-06-05 19:15:13
cvelist
cvelist
CVE-2020-13869
2020-06-05 18:34:45