本ページは verbb comments に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2020-13870 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name. | [email protected] | 5.4 | 0.54% | 2020-06-05 | 2026-06-16 |
| CVE-2020-13869 | An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name. | [email protected] | 5.4 | 0.54% | 2020-06-05 | 2026-06-16 |
| CVE-2020-13868 | An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity. | [email protected] | 6.5 | 0.43% | 2020-06-05 | 2026-06-16 |