PT-2022-7962 · WordPress · Gwolle Guestbook Plugin

Radjnies Bhansingh · Published 2022-06-23 · Updated 2022-06-29 · CVE-2017-20089

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Gwolle Guestbook Plugin version 1.7.4

Description A vulnerability was found in the Gwolle Guestbook Plugin. This issue affects some unknown processing and leads to basic cross site scripting. The attack may be initiated remotely.

Recommendations For Gwolle Guestbook Plugin version 1.7.4, consider updating to a newer version to mitigate the risk of cross site scripting attacks. As a temporary workaround, restrict access to the plugin to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2017-20089

Affected Products

Gwolle Guestbook Plugin

References · 6

• 🔥 http://seclists.org/bugtraq/2017/Mar/1 · Exploit
• https://osv.dev/vulnerability/CVE-2017-20089 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20089 · Security Note
• https://vuldb.com/?id.97379 · Note
• https://t.me/cvenotify/32033 · Telegram Post
• https://t.me/cibsecurity/44962 · Telegram Post