When editing a comment, the query uses $cedit instead of $comid. It needs to be changed, and a security check is needed on $comid.
In file comments.php, find around line 449 :
Code:
Content visible to verified customers only.
And replace with :
Code:
Content visible to verified customers only.