CVE-2017-20177

The CVE-2017-20177 entry concerns WangGuard Plugin 1.8.0 for WordPress. The vulnerability lies in the wangguard_users_info function within wangguard-user-info.php (WGG User List Handler), where manipulation of the userIP argument enables cross-site scripting. The issue can be exploited remotely. ...