WordPress Gwolle Guestbook plugin <= 2.5.3 - Cross-Site Scripting (XSS) vulnerability

2018-08-0900:00:00

DefenseCode

patchstack.com

Cross-Site Scripting (XSS) vulnerability found by DefenseCode in WordPress Gwolle Guestbook plugin (versions <= 2.5.3).

Solution

           Update the WordPress Gwolle Guestbook plugin to the latest available version (at least 2.5.4).

CPENameOperatorVersion
gwolle guestbookle2.5.3

CPE	Name	Operator	Version
	gwolle guestbook	le	2.5.3

wordpress.org/plugins/gwolle-gb/#developers