CVE-2017-1002017

2022-10-0316:22:52

larry_cashdollar

www.cve.org

vulnerability

wordpress

plugin

xss

0.001 Low

EPSS

Percentile

30.2%

JSON

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn’t sanitize user input to prevent a stored XSS vulnerability.

CNA Affected

[
  {
    "product": "gift-certificate-creator",
    "vendor": "Bob Cares",
    "versions": [
      {
        "lessThan": "1.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.vapidlabs.com/advisory.php?v=191

wordpress.org/plugins/gift-certificate-creator/

0.001 Low

EPSS

Percentile

30.2%

JSON

Related for CVELIST:CVE-2017-1002017