Vulnerabilities > Verbb > Comments > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-06-05 CVE-2020-13870 Cross-site Scripting vulnerability in Verbb Comments
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
network
low complexity
verbb CWE-79
5.4
2020-06-05 CVE-2020-13869 Cross-site Scripting vulnerability in Verbb Comments
An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS.
network
low complexity
verbb CWE-79
5.4
2020-06-05 CVE-2020-13868 Cross-Site Request Forgery (CSRF) vulnerability in Verbb Comments
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS.
network
low complexity
verbb CWE-352
6.5