Threats tagged 'ghsa-c389-rcp4-2837'

An information disclosure vulnerability exists in the Forocoches comments editor. An attacker can exploit this by inserting an image with a malicious external URL into a comment. When a user views the affected discussion thread, their browser sends a request to the attacker's server, exposing user information such as IP address, User-Agent, and access metadata. This compromises user privacy.