SECURITY BUG: Project manager comments feed into "recent comments" list
In a theme with Simple Recent Comments plugin baked in, the following occurs: the comments from Project Manager show up as comments from users on the site’s frontend.
While the backend comments do not show up in full on the frontend of the site, the following does:
– the person who made the comment
– the name of the entry to which the comment was made (with subfolder structure revealed for message, task)
– a link to the comment (which thankfully generates a 404 message on click, but still!)
- The topic ‘SECURITY BUG: Project manager comments feed into "recent comments" list’ is closed to new replies.