MEDIUM5.4
GHSA-jhhf-c849-3rh2
Comments plugin stored Cross-site Scripting via a guest name
Quick fix
GHSA-jhhf-c849-3rh2 — verbb/comments: upgrade to the fixed version with the command below.
composer require verbb/comments:^1.5.5Details
An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via a guest name.
Are you affected?
Enter the version of the package you're using.