Approved changes feed: RSS · Atom

cpe:2.3:a:verbb:comments:*:*:*:*:*:craft_cms:*:*

part: a version: * update: *

VendorVerbb (ecfa9ad1-6e3a-58c0-a96e-8eda20e19ffa)
ProductComments (76cfc7a5-c613-5f55-ab50-967825411ba8)
Edition*
Language*
Software edition*
Target softwarecraft_cms
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/verbb/comments purl2cpe 2026-06-01 10:14:54.876199

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13870 vulnerable 2026-06-08 05:18:01.256048 Details available
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name.
Published: 2020-06-05T18:34:35.000Z
Updated: 2024-08-04T12:32:14.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13869 vulnerable 2026-06-08 05:18:01.255751 Details available
An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name.
Published: 2020-06-05T18:34:45.000Z
Updated: 2024-08-04T12:32:13.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13868 vulnerable 2026-06-08 05:18:01.255362 Details available
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity.
Published: 2020-06-05T18:35:06.000Z
Updated: 2024-08-04T12:32:14.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.