MEDIUM6.5

GHSA-4r8c-pj7x-m5jx

Comments plugin Cross-Site Request Forgery (CSRF)

Quick fix

GHSA-4r8c-pj7x-m5jx — verbb/comments: upgrade to the fixed version with the command below.

composer require verbb/comments:^1.5.5

Details

An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 1.5.5

Fixcomposer require verbb/comments:^1.5.5