https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:54:12.810561+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6704 CVE-2024-6704 — Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection 2026-10-07T04:54:12.827492+00:00

Affected: advancedcoding Comments – wpDiscuz, gvectorsteam comments-wpdiscuz

The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering of HTML tags in comments. This makes it possible for unauthenticated attackers to add HTML such as hyperlinks to comments when rich editing is disabled.