CVE-2021-47950

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the semotion parameter. Attackers can submit POST requests to admin.php with JavaScript code in...

CVE-2021-47950 Advanced Guestbook 2.4.4 Persistent XSS via Smilies

Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the semotion parameter. Attackers can submit POST requests to admin.php with JavaScript code in...

PT-2026-39524

Name of the Vulnerable Software and Affected Versions Advanced Guestbook version 2.4.4 Description A persistent cross-site scripting issue exists in the smilies administration interface. Authenticated attackers can inject malicious scripts by sending POST requests to the 'admin.php' endpoint usin...