CVE-2017-1002017

CVE-2017-1002017 affects the WordPress plugin Gift Certificate Creator 1.0 . The vulnerability is in the file gc-list.php , where user input is not sanitized, enabling a stored XSS vulnerability. According to NVD, the CVSS2/3 base scores are 4.3 (MEDIUM) and 6.1 (MEDIUM), indicating moderate impa...