Threat Entry Updated 2025-05-13

CVE-2024-29804 - Fancy Comments Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.14.

PLUGIN Fancy Comments

CVE-2024-29804

MEDIUM CVSS 6.5 2024-03-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-23670 - Fancy Comments Plugin

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin

PLUGIN Fancy Comments

CVE-2023-23670

MEDIUM CVSS 6.5 2023-03-30

Risk Score

Open Full Technical Breakdown