~ / search / GHSA-4r8c-pj7x-m5jx

GHSA-4r8c-pj7x-m5jx

Comments plugin Cross-Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-13868

Packages

EcosystemPackageAffectedFixed in
Packagist verbb/comments < 1.5.5 1.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity.

References

External links from the advisory. They lead to third-party sites.