It's only libelous if it's not true. This vulnerability says otherwise.
It is libelous because it is a claim that "X said Y", not "Y".
It is libelous because it is a claim that "X said Y", not "Y".