WordPress security by component

Comments by Startbit

Plugin description

Comments by Startbit is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 30, 2023; the highest CVE/CNA score is 6.4.

Plugin slug: facebook-comment-by-vivacity

Latest vulnerability

CVE-2023-5295: Comments by Startbit: Cross-site scripting

Comments by Startbit is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedSep 30, 2023

Safe version guidanceSee mitigation notes

		Safe version
Sep 30, 2023	CVE-2023-5295 Comments by Startbit: Cross-site scripting Comments by Startbit is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVD5.4