GHSA-jhhf-c849-3rh2
Comments plugin stored Cross-site Scripting via a guest name
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | verbb/comments | < 1.5.5 | 1.5.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via a guest name.
References
External links from the advisory. They lead to third-party sites.