PT-2023-9859
CVE-2006-10001
·
Published
2023-03-05
·
Updated
2024-11-12
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Subscribe to Comments Plugin versions up to 2.0.7
Description
A problematic vulnerability was found in the Subscribe to Comments Plugin, affecting an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting and can be initiated remotely.
Recommendations
For versions up to 2.0.7, upgrade to version 2.0.8 to address this issue. As a temporary workaround, consider restricting access to the affected
subscribe-to-comments.php file until the upgrade is applied. Found an issue in the description? Have something to add? Feel free to write us 👾