Read the docs

Edit Comments Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Edit Comments Project records in CISA KEV

No Edit Comments Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Edit Comments 1 record MEDIUM

Records

1 record

TI-2021-06836 CVE-2021-24551 · GHSA-36wv-rwmv-5hf6

Edit Comments <= 0.3 - Unauthenticated SQL Injection

Priority MEDIUM 46

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01911 Published 2021-08-23 No fix listed CWE-89
Open these records in search →