Unrated
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.
CVE-2020-23689
First seen on SecPulse
References
- report github.com