Gwolle Guestbook <= 2.5.3 - Cross-Site Scripting (XSS)

Affects Plugin

Gwolle Guestbook

fixed in version 2.5.4

References

CVE	2018-17884
URL	https://seclists.org/fulldisclosure/2018/Jul/89
URL	http://www.defensecode.com/advisories/DC-2018-05-008_WordPress_Gwolle_Guestbook_Plugin_Advisory.pdf
URL	https://plugins.trac.wordpress.org/changeset/1888023/gwolle-gb

Classification

Type	XSS
OWASP Top 10	A7: Cross-Site Scripting (XSS)
CWE	CWE-79

Miscellaneous

Submitter	Ryan Dewhurst
Submitter Website	https://dewhurstsecurity.com/
Submitter Twitter	ethicalhack3r
Views	7311
Verified	No
WPVDB ID	9109

Timeline

Publicly Published	2018-07-28 (almost 2 years ago)
Added	2018-07-31 (almost 2 years ago)
Last Updated	2019-11-01 (8 months ago)

Our Other Services

Online WordPress Vulnerability Scanner

WPScan WordPress Security Plugin