Search
Search Results (2 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-24838 | 1 Bologer | 1 Anycomment | 2024-11-21 | 6.1 Medium |
| The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature. | ||||
| CVE-2018-21001 | 1 Bologer | 1 Anycomment | 2024-11-21 | N/A |
| The anycomment plugin before 0.0.33 for WordPress has XSS. | ||||
Page 1 of 1.