CVE-2017-20177

The CVE-2017-20177 entry concerns WangGuard Plugin 1.8.0 for WordPress. The vulnerability lies in the wangguard_users_info function within wangguard-user-info.php (WGG User List Handler), where manipulation of the userIP argument enables cross-site scripting. The issue can be exploited remotely. ...

CVE-2017-20177 WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting

A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguardusersinfo of the file wangguard-user-info.php of the component WGG User List Handler. The manipulation of the argument userIP leads to cross...