Fancy Comments

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-29804 Mar 27, 13:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.2.14. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Fancy Comments Heateor

NVD

CVSS 3.1

6.5

EPSS

0.2%

CVE-2023-23670 Mar 30, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Fancy Comments Heateor

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2024-29804

EPSS 0% CVSS 6.5

MEDIUM This Month

WordPress XSS Fancy Comments +1

NVD

CVE-2023-23670

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Fancy Comments +1

NVD