2 matches found
CVE-2018-17884: Improper Neutralization of Input During Web Page Generation
XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook gwolle-gb plugin before 2.5.4 for WordPress via the PATHINFO to wp-admin/index.php...
6.1CVSS6.3AI score0.01212EPSS
SaveExploits1References2
PT-2018-14245
Name of the Vulnerable Software and Affected Versions Gwolle Guestbook gwolle-gb plugin versions prior to 2.5.4 Description A security issue exists in the admin/gb-dashboard-widget.php file of the Gwolle Guestbook plugin for WordPress. This issue can be exploited via the PATH INFO to...
6.1CVSS0.01212EPSS
SaveExploits1References5
20