← Back

Utopique

utopique

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Better Comments
better_comments
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-2404
1Utopique
1Better Comments
Jun 17, 2026
Apr 24, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow low privilege users such as Subscribers to perform Stored Cross-Site Scripting attacks.
CVE-2024-2402
1Utopique
1Better Comments
Jun 17, 2026
Apr 24, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil...Show more
The Better Comments WordPress plugin before 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less