https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T11:08:00.679201+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-15156 CVE-2020-15156 — XSS due to lack of CSRF validation for replying/publishing 2026-10-27T11:08:00.680292+00:00

Affected: psychobunny nodebb-plugin-blog-comments

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation.