verbb/comments
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Comments plugin stored Cross-site Scripting (XSS) via an asset volume name | verbb/comments | Composer | Medium | Fix reported | |
| Comments plugin Cross-Site Request Forgery (CSRF) | verbb/comments | Composer | Medium | Fix reported | |
| Comments plugin stored Cross-site Scripting via a guest name | verbb/comments | Composer | Medium | Fix reported |