Blog Comments

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-15156 Aug 26, 19:15 npm HIGH PATCH This Week

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

XSS CSRF Nodebb Blog Comments

NVD GitHub

CVSS 3.1

8.1

EPSS

0.6%

CVE-2020-15156 npm

EPSS 1% CVSS 8.1

HIGH PATCH This Week

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

XSS CSRF Nodebb +1

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy