Gwolle Guestbook Project: >> Gwolle Guestbook >> 1.7.4 Security Vulnerabilities
A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The attack may be initiated remotely.
CVSS Score
3.5
EPSS Score
0.002
Published
2022-06-23
The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page
CVSS Score
6.1
EPSS Score
0.002
Published
2021-12-27
XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php
CVSS Score
6.1
EPSS Score
0.003
Published
2018-10-02