Vulnerabilities and Security Researches

Gwolle Guestbook, CVE-2018-17884

CVE, Research URL: CVE-2018-17884
Home page URL: Security reports for Gwolle Guestbook
Application: Gwolle Guestbook
Published on: Oct 02, 2018
Research Description: XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php
Affected versions: max 2.5.4.
Status: vulnerable