Comments

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-13870 PHP MEDIUM PATCH This Month

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Comments

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2020-13869 PHP MEDIUM PATCH This Month

An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Comments

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2020-13868 PHP MEDIUM PATCH This Month

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Comments

NVD GitHub

CVSS 3.1

6.5

EPSS

0.4%

CVE-2020-13870 PHP

EPSS 1% CVSS 5.4

MEDIUM PATCH This Month

XSS Comments

NVD GitHub

CVE-2020-13869 PHP

EPSS 1% CVSS 5.4

MEDIUM PATCH This Month

XSS Comments

NVD GitHub

CVE-2020-13868 PHP

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

CSRF Comments

NVD GitHub