2020/CVE-2020-23342/vultarget/anchor-cms/anchor/views/comments/edit.php
<?php echo $header; ?>

<header class="wrap">
  <h1><?php echo __('comments.editing_comment'); ?> &rarr; <?php $commented_post = Post::where('id', '=',
          $comment->post)->get();
      echo $commented_post[0]->title; ?></h1>
</header>

<section class="wrap">
  <form method="post" action="<?php echo Uri::to('admin/comments/edit/' . $comment->id); ?>" novalidate>
    <input name="token" type="hidden" value="<?php echo $token; ?>">

    <fieldset class="split">
      <p>
        <label for="label-name"><?php echo __('comments.name'); ?>:</label>
          <?php echo Form::text('name', Input::previous('name', $comment->name), ['id' => 'label-name']); ?>
        <em><?php echo __('comments.name_explain'); ?></em>
      </p>

      <p>
        <label for="label-email"><?php echo __('comments.email'); ?>:</label>
          <?php echo Form::email('email', Input::previous('email', $comment->email), ['id' => 'label-email']); ?>
        <em><?php echo __('comments.email_explain'); ?></em>
      </p>

      <p>
        <label for="label-text"><?php echo __('comments.text'); ?>:</label>
          <?php echo Form::textarea('text', Input::previous('text', $comment->text), ['id' => 'label-text']); ?>
        <em><?php echo __('comments.text_explain'); ?></em>
      </p>

      <p>
        <label for="label-status"><?php echo __('comments.status', 'Status'); ?>:</label>
          <?php echo Form::select('status', $statuses, Input::previous('status', $comment->status),
              ['id' => 'label-status']); ?>
        <em><?php echo __('comments.status_explain'); ?></em>
      </p>
    </fieldset>

    <aside class="buttons">
        <?php echo Form::button(__('global.save'), ['type' => 'submit', 'class' => 'btn']); ?>

        <?php echo Html::link('admin/comments', __('global.cancel'), ['class' => 'btn cancel blue']); ?>

        <?php echo Html::link('admin/comments/delete/' . $comment->id, __('global.delete'), [
            'class' => 'btn delete red'
        ]); ?>
    </aside>
  </form>
</section>

<?php echo $footer; ?>
