Fancy Comments

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-29804 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.2.14. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS WordPress Fancy Comments

NVD

CVSS 3.1

6.5

EPSS

0.2%

CVE-2023-23670 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Fancy Comments

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2024-29804

EPSS 0% CVSS 6.5

MEDIUM This Month

XSS WordPress Fancy Comments

NVD

CVE-2023-23670

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Fancy Comments

NVD