Filtered by vendor Nodebb
Subscriptions
Filtered by product Blog Comments
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2020-15156 | 1 Nodebb | 1 Blog Comments | 2020-09-01 | 8.1 High |
In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation. |
Page 1 of 1.