← Back

Ark Wysiwyg Comment Editor

ark_wysiwyg_comment_editor

Vendor: Obg • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Obg
1Ark Wysiwyg Comment Editor
Jun 17, 2026
Jan 16, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any p...Show more
The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page to the comment sectionShow less