Vulnerabilities in comments 1.5.4