comments_editor vulnerabilities

CVEs whose affected-version data names the comments_editor package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-14467High· 8.2

1w ago

Display of information in the Forocoches comments editor

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the d…

▾ TwilightForocoches · Forocoches comments editorEPSS 0.29%via CVEORG