parallax/filament-comments vulnerabilities

CVEs whose affected-version data names the parallax/filament-comments package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-90943High· 8.7

1w ago

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies…

▾ Twilightparallax · parallax/filament-commentsEPSS 0.43%via NVD