advancedcoding Schwachstellen (CVE)

Für advancedcoding veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

12 Ergebnisse
5.3Mittel
CVE-2024-6704

Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection

advancedcoding Comments – wpDiscuz; gvectorsteam comments-wpdiscuz

The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering of HTML tags in comments. This makes it possible for unauthenticated attackers to add HTML such as hy…