Medium severity6.1NVD Advisory· Published Dec 27, 2021· Updated Jun 17, 2026
CVE-2021-24980
CVE-2021-24980
Description
The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:gwolle_guestbook_project:gwolle_guestbook:*:*:*:*:*:wordpress:*:*Range: <4.2.0
- Range: <4.2.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e50bcb39-9a01-433f-81b3-fd4018672b85nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.