Unrated severityNVD Advisory· Published Dec 27, 2021· Updated Aug 3, 2024
Gwolle Guestbook < 4.2.0 - Reflected Cross-Site Scripting
CVE-2021-24980
Description
The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <4.2.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/e50bcb39-9a01-433f-81b3-fd4018672b85mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.