Comments – Wpdiscuz
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:comments_–_wpdiscuz:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Comments – Wpdiscuz (909d3481-e034-5888-af07-aad63142cff4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24806 |
vulnerable | 2026-06-08 05:30:39.276238 |
wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRF
The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary comment, or the user who made the comment to edit it via a CSRF attack. Attackers could also make logged in users post arbitrary comment.
Published: 2021-11-08T17:35:24.000Z
Updated: 2024-08-03T19:42:17.338Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24737 |
vulnerable | 2026-06-08 05:30:39.111060 |
Comments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site Scripting
The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2021-10-11T10:45:51.000Z
Updated: 2024-08-03T19:42:16.541Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.