gvectorsteam vulnerabilities (CVE)

CVE records published for gvectorsteam, newest first. Follow to get an email when a new one appears.

1 results

5.3Medium

CVE-2024-6704 2 years ago

Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection

advancedcoding Comments – wpDiscuz; gvectorsteam comments-wpdiscuz

The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering of HTML tags in comments. This makes it possible for unauthenticated attackers to add HTML such as hy…