PT-2023-9859

CVE-2006-10001

·

Published

2023-03-05

·

Updated

2024-11-12

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Subscribe to Comments Plugin versions up to 2.0.7
Description A problematic vulnerability was found in the Subscribe to Comments Plugin, affecting an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting and can be initiated remotely.
Recommendations For versions up to 2.0.7, upgrade to version 2.0.8 to address this issue. As a temporary workaround, consider restricting access to the affected subscribe-to-comments.php file until the upgrade is applied.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾