Anycomment Anycomment.io — known CVE vulnerabilities

Every CVE whose affected-product data names Anycomment Anycomment.io, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-67025 — CVSS 6.1 (medium): Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to execute arbitrary code via the Anycomment…