Loading product vulnerabilities…
Total
2
Critical
0
High
0
Medium
0
CISA KEV
0
TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify comments.
addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.