Known vulnerabilities in the Com plugin
8 security advisories have been published for the Com plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Com - Path Traversal (CVE-2026-14244) HIGH
- Com - Cross-Site Scripting (XSS) (CVE-2024-11447) MEDIUM
- Com - Cross-Site Scripting (XSS) (CVE-2024-4085) MEDIUM
- Com - Remote Code Execution (CVE-2023-5843) CRITICAL
- Com - Cross-Site Scripting (XSS) (CVE-2023-2272) MEDIUM
- Com - Cross-Site Request Forgery (CSRF) (CVE-2023-2271) MEDIUM
- Com - Cross-Site Scripting (XSS) (CVE-2023-0058) MEDIUM
- Com - Cross-Site Scripting (XSS) (CVE-2021-38330) MEDIUM