Read the docs

Good-bad-comments Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Good-bad-comments Project records in CISA KEV

No Good-bad-comments Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Good-bad-comments 1 record LOW

Records

1 record in Good-bad-comments · all components

TI-2022-00985 CVE-2022-1090 · GHSA-vg5q-w4v9-q7x5

Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-04-18 No fix listed CWE-79
Open these records in search →