isso-comments

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

isso-comments records in CISA KEV

No isso-comments vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-21876 CVE-2026-27469 · GHSA-9fww-8cpr-q66r

Isso: Stored XSS via comment website field

LOW 27

Isso is a lightweight commenting server written in Python and JavaScript.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00259 Published 2026-02-21 Fixed in 0afbfe0691ee237963e8fb0b2ee01c9e55ca2144, 0.13.2 CWE-116

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0