PT-2021-16391

Name of the Vulnerable Software and Affected Versions: Gwolle Guestbook WordPress plugin versions prior to 4.2.0 Description: The issue is related to a Reflected Cross-Site Scripting problem in an admin page. It occurs because the gwolle gb user email parameter is not properly sanitised and escap...

CVE-2018-17884

The CVE affects the WordPress Gwolle Guestbook plugin (gwolle-gb) prior to version 2.5.4. Vulnerability: XSS in admin/gb-dashboard-widget.php exploitable via PATH_INFO to wp-admin/index.php. Root cause: improper handling of PATH_INFO leading to script injection in the admin context. Impact: poten...

CVE-2018-17884: Improper Neutralization of Input During Web Page Generation

XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook gwolle-gb plugin before 2.5.4 for WordPress via the PATHINFO to wp-admin/index.php...