Executive brief
Comments plugin stored Cross-site Scripting (XSS) via an asset volume name
Affected products
- Packagist verbb/comments
Junglewise Threat Intelligence
CVE-2020-13870: Comments plugin stored Cross-site Scripting (XSS) via an asset volume name
CVE-2020-13870 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: verbb/comments (Packagist). Vendors: Packagist.