Lucene search
Veracode Vulnerability DatabaseVERACODE:25622HistoryJun 08, 2020 - 3:03 a.m.
Cross-site Scripting (XSS)
2020-06-0803:03:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
22.7%
verbb/comments is vulnerable to cross-site scripting (XSS). It is possible because it does not sanitize the user-provided input for guest name username, allowing an attacker to inject and execute malicious scripts in a user’s browser.
Related
osv
osv
CVE-2020-13869
2020-06-05 19:15:13
Comments plugin stored Cross-site Scripting via a guest name
2022-05-24 17:19:26
github
github
Comments plugin stored Cross-site Scripting via a guest name
2022-05-24 17:19:26
prion
prion
Cross site scripting
2020-06-05 19:15:00
nvd
nvd
CVE-2020-13869
2020-06-05 19:15:13
cvelist
cvelist
CVE-2020-13869
2020-06-05 18:34:45
cve
cve
CVE-2020-13869
2020-06-05 19:15:13