SZB-f812678bb6
Forocoches comments editor flaw could expose user information, EUVD reports
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Forocoches
- Product
- Comments editor
- First seen
Summary
The EU Vulnerability Database lists EUVD-2026-113760, an information disclosure flaw in the Forocoches comments editor with a CVSS score of 8.2. The listing says an attacker can obtain unauthorized user information by posting a comment with an image pointing to a malicious external URL.
If you use Forocoches
Check with Forocoches for a patch or update to the comments editor
Avoid viewing comments from unknown users until a fix is confirmed
Review your account for unexpected activity and change your password if needed
What the sources say 1
· Mastodon: “An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment.” Source