5.3Media
Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection
advancedcoding Comments – wpDiscuz; gvectorsteam comments-wpdiscuz
The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering of HTML tags in comments. This makes it possible for unauthenticated attackers to add HTML such as hy…