VYPR

Fancy Comments

by Heateor

CVEs (2)

  • CVE-2024-29804MedMar 27, 2024
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.14.

  • CVE-2023-23670MedMar 30, 2023
    risk 0.42cvss 6.5epss 0.00

    Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 versions.