Threats tagged 'ghsa-v3mq-vj7f-qxwx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-15032Comments (WordPress plugin) · Cross-Site Scripting (XSS) Medium6.1EPSS 0.3%2026-08-07CVE Database V5CVE-2026-15032 A Cross-Site Scripting (XSS) vulnerability exists in the Comments WordPress plugin before version 7.6.60. The plugin does not properly escape user-supplied URLs before outputting them inside HTML attributes. This allows unauthenticated users to store malicious scripts that execute in the browsers of users who view the affected content, including administrators. EPSS 0.3%Vulnerability CWE-79 #ghsa-v3mq-vj7f-qxwx	CVE Database V5	2026-08-07

Page 1 of 1