Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Nodebb Subscribe
Filtered by product Blog Comments
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-15156 1 Nodebb 1 Blog Comments 2020-09-01 4.3 MEDIUM 8.1 HIGH
In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation.