CVE-2020-13870

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS

published June 5, 2020

CVSS
—
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00540 · 44.6th percentile
Published
2020-06-05T18:34Z
EPSS history
Timeline
  • 05 JUN 18:34Z
    An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS
    cvelistv5