Utopique

Better Comments

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-2402

Exploit
  • EPSS 0.13%
  • Veröffentlicht 24.04.2024 05:15:47
  • Zuletzt bearbeitet 08.05.2025 19:11:11

The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disal...

5.4

CVE-2024-2404

Exploit
  • EPSS 0.27%
  • Veröffentlicht 24.04.2024 05:15:47
  • Zuletzt bearbeitet 21.11.2024 09:09:40

The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow low privilege users such as Subscribers to perform Stored Cross-Site Scripting attacks.